Unintended Path Class Loading Vulnerability in Samsung Call+ Application (SVE-2017-10886)

Unintended Path Class Loading Vulnerability in Samsung Call+ Application (SVE-2017-10886)

CVE-2018-21075 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. The Call+ application can load classes from an unintended path, leading to Code Execution. The Samsung ID is SVE-2017-10886 (April 2018).

Learn more about our Cis Benchmark Audit For Mobile Devices.