VULNERABILITY INTELLIGENCE

CVE-2018-21051

CVSS score9.8 CRITICAL
EPSS probability0.86%
CISA KEVNot currently listed
Published2020-04-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. There is an invalid free in the fingerprint Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12853 (October 2018).

Weakness classification

  • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Primary references