Arbitrary Code Execution Vulnerability in Samsung SVoice (SVE-2017-9299)

CVE-2017-18652 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. SVoice allows arbitrary code execution by changing dynamic libraries. The Samsung ID is SVE-2017-9299 (September 2017).

Learn more about our Cis Benchmark Audit For Mobile Devices.