CVE Feed

    Dashboard / CVE / CVE-2017-18681

    CVE-2017-18681

    An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 (Qualcomm AP chipsets). There are multiple buffer overflows in the bootloader. The Samsung ID is SVE-2016-7930 (March 2017).

    Published:Apr 7, 2020
    Last Modified:Nov 21, 2024
    EPS:Apr 7, 2020
    EPSS Score:0.00626
    CVSS Score:9.8

    Affected Products

    Vendor
    Samsung
    Product
    Galaxy S5
    Vendor
    Samsung
    Product
    Galaxy S5 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-35693 (CVSS 8.8) — On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bl…
    CVE-2016-11038 (CVSS 9.8) — An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung …
    CVE-2016-7991 (CVSS 7.5) — On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP me…
    CVE-2016-7990 (CVSS 9.8) — On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing …
    CVE-2016-7988 (CVSS 7.5) — On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handl…
    CVE-2016-7989 (CVSS 7.5) — On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotel…
    CVE-2015-4034 (CVSS 7.9) — The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s all…
    CVE-2015-4640 (CVSS 2.9) — The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on a…
    CVE-2015-4641 (CVSS 6.4) — Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High