Integer Underflow Vulnerability in Samsung Mobile Devices (SVE-2017-11855)

Integer Underflow Vulnerability in Samsung Mobile Devices (SVE-2017-11855)

CVE-2018-21065 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. There is an integer underflow in eCryptFS because of a missing size check. The Samsung ID is SVE-2017-11855 (August 2018).

Learn more about our Cis Benchmark Audit For Mobile Devices.