CVE-2017-18696

An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos7420, Exynos8890, or MSM8996 chipsets) software

published April 7, 2020

CVSS
—
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

⚠️ Memory corruption lurking in Samsung devices! An issue with RKP on certain chipsets might leave your device vulnerable. 🔥 Think of RKP as a bouncer at a club who accidentally lets in someone without checking their ID. A little slip-up can lead to chaos inside, allowing unauthorized access to sensitive areas of your device! If exploited, this vulnerability could potentially allow attackers to manipulate memory and execute unauthorized code, compromising the device's integrity. While there aren't reports of exploitation yet, the possibility is still concerning for Samsung users!

Put simply

Think of RKP as a bouncer at a club who accidentally lets in someone without checking their ID. A little slip-up can lead to chaos inside, allowing unauthorized access to sensitive areas of your device! This vulnerability is linked to the RKP (Runtime Kernel Protection) feature, which has a flaw that allows memory corruption on devices running Android Marshmallow (6.0) or Nougat (7.0) with Exynos7420, Exynos8890, or MSM8996 chipsets.

What to do

If exploited, this vulnerability could potentially allow attackers to manipulate memory and execute unauthorized code, compromising the device's integrity. While there aren't reports of exploitation yet, the possibility is still concerning for Samsung users! To safeguard your device, ensure you are running the latest firmware updates from Samsung. Regularly check for security patches and, if needed, factory reset your device to ensure there are no remnants of vulnerabilities. You've got this! Stay vigilant and keep your devices secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.2th percentile
Published
2020-04-07T13:52Z
EPSS history
Timeline
  • 07 APR 13:52Z
    An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos7420, Exynos8890, or MSM8996 chipsets) software
    cvelistv5