CVE-2018-9141: Input Validation

Published Mar 30, 2018

Updated

On Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105.

Affected Software

7 affected components

Samsung Samsung Mobile=5.0

Samsung Samsung Mobile=5.1

Samsung Samsung Mobile=6.0

Samsung Samsung Mobile=7.0

Samsung Samsung Mobile=7.1

Samsung Samsung Mobile=7.1.1

Samsung Samsung Mobile=7.1.2

Event History

Mar 30, 2018

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Data Sourced

via NVD·08:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-9141?

CVE-2018-9141 is classified as a high severity vulnerability due to its ability to allow remote code execution.

How do I fix CVE-2018-9141?

To mitigate CVE-2018-9141, users should update their Samsung mobile devices to the latest software version provided by Samsung.

What devices are affected by CVE-2018-9141?

CVE-2018-9141 affects Samsung mobile devices running Lollipop (5.x), Marshmallow (6.0), and Nougat (7.x) software.

What type of attack does CVE-2018-9141 involve?

CVE-2018-9141 involves a remote attack via a specially crafted BMP file that can lead to arbitrary code execution.

Who is impacted by CVE-2018-9141?

Users of affected Samsung mobile devices who open crafted BMP files are at risk from CVE-2018-9141.