CVE-2018-9142: Input Validation

Published Mar 30, 2018

Updated

On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and package name, aka SVE-2017-10932.

Affected Software

4 affected components

Samsung Samsung Mobile=7.0

Samsung Samsung Mobile=7.1

Samsung Samsung Mobile=7.1.1

Samsung Samsung Mobile=7.1.2

Event History

Mar 30, 2018

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Data Sourced

via NVD·08:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-9142?

CVE-2018-9142 is classified as a high severity vulnerability due to its potential to allow arbitrary APK installations.

How do I fix CVE-2018-9142?

To mitigate CVE-2018-9142, update your Samsung mobile device to the latest firmware version that addresses this vulnerability.

What systems are affected by CVE-2018-9142?

CVE-2018-9142 affects Samsung mobile devices running Android versions 7.0, 7.1, 7.1.1, and 7.1.2.

What can attackers do exploiting CVE-2018-9142?

Exploiting CVE-2018-9142, attackers can install unverified applications within the Secure Folder SD Card area.

Is the Secure Folder feature at risk due to CVE-2018-9142?

Yes, the Secure Folder feature is compromised in devices affected by CVE-2018-9142, allowing unauthorized APK installations.