VULNERABILITY INTELLIGENCE
CVE-2017-18675
CVSS score7.5 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2020-04-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) (Exynos7420 or Exynox8890 chipsets) software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 (April 2017).
Weakness classification
- CWE-772: Missing Release of Resource after Effective Lifetime
Primary references
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory