CVE-2018-21051

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. There is an invalid free in the fingerprint Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12853 (October 2018).

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-04-08

Last modified

2024-08-05

Weaknesses

CWE-74

Affected products

• Android (Google)

References

• https://security.samsungmobile.com/securityUpdate.smsb