Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: Samsung Component: Galaxy S6 Firmware Clear all filters
TI-2018-10593 CVE-2018-14745 · GHSA-45fc-mr5g-5947

Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung…

Priority MEDIUM 42

Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to overwrite kernel memory due…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0191 Published 2019-03-15 No fix listed CWE-119
TI-2018-10677 CVE-2018-14856 · GHSA-5239-56w9-hx7j

Buffer overflow in dhd_bus_flow_ring_create_response in…

Priority LOW 30

Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (who has obtained code e…

CVSS 3.0MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00949 Published 2018-12-17 No fix listed CWE-119
TI-2018-10676 CVE-2018-14855 · GHSA-5w63-xw96-85rr

Buffer overflow in dhd_bus_flow_ring_flush_response in…

Priority LOW 30

Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker (who has obtained code execution on the Wi-Fi ch…

CVSS 3.0MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00949 Published 2018-12-17 No fix listed CWE-119
TI-2018-10675 CVE-2018-14854 · GHSA-7g2w-vj4h-6vwf

Buffer overflow in dhd_bus_flow_ring_delete_response in…

Priority LOW 30

Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (who has obtained code e…

CVSS 3.0MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00949 Published 2018-12-17 No fix listed CWE-119
TI-2018-10674 CVE-2018-14853 · GHSA-pjxr-6c7r-hpjf

A NULL pointer dereference in dhd_prot_txdata_write_flush in…

Priority LOW 22

A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtaine…

CVSS 3.0MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00938 Published 2018-12-17 No fix listed CWE-476
TI-2018-10673 CVE-2018-14852 · GHSA-w22q-qppc-h59j

Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c…

Priority LOW 30

Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution…

CVSS 3.0MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00963 Published 2018-12-17 No fix listed CWE-119
TI-2016-02312 CVE-2016-2567 · GHSA-mgxj-2m8w-mj9x

secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and…

Priority LOW 16

secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an "exceptional URL" in the…

CVSS 3.0LOW 3.3 Local Low privileges No interaction EPSS 0.00397 Published 2017-04-13 No fix listed CWE-20
TI-2016-01867 CVE-2016-2036 · GHSA-3xp5-x55c-8fj2

The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel…

Priority LOW 25

The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to trigge…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00365 Published 2017-04-13 No fix listed CWE-476