CVE-2017-18020

EUVD-2017-9160
On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs data to memory. The Samsung ID is SVE-2017-10598.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.4 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
samsungsamsung_mobile
5.0
samsungsamsung_mobile
5.1
samsungsamsung_mobile
5.1.1
samsungsamsung_mobile
6.0
samsungsamsung_mobile
6.0.1
samsungsamsung_mobile
7.0
samsungsamsung_mobile
7.1
samsungsamsung_mobile
7.1.1
samsungsamsung_mobile
7.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungmobile.com/securityUpdate.smsb
https://security.samsungmobile.com/securityUpdate.smsb