Samsung

Samsung is affected by vulnerabilities that affect all Android manufacturers in addition to those listed below.

Samsung has a FUM score of 2.81.

CVE numbers: CVE-2012-0056 [mempodroid-cve-mitre]
Coordinated disclosure?: false
Categories: kernel
Details: The mem_write function in the Linux kernel does not properly check permissions, allowing a user to gain privileges [mempodroid-cve-mitre]
Discovered by: Jay Freeman (saurik) [xda-forum-mempodroid] on: 2012-01-24 [xda-forum-mempodroid]
Reported on: 2012-01-24 [xda-forum-mempodroid]
Fixed on: 2012-01-17 [citation-needed]
Fix released on: Unknown
Affected versions: 4.0.1-4.0.3 [citation-needed] regex: 4.0.[1-3]
Affected devices: Acer A200 Tablet, Galaxy Nexus, Motorola RAZR, Nexus S, Asus Transformer Prime [android-paper]
Affected manufacturers: Acer [android-paper], Samsung [android-paper], Motorola [android-paper], Asus [android-paper]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-03

CVE numbers:
Coordinated disclosure?: true
Categories: kernel
Details: [talks.cam-46303]
Discovered by: Janis Danisevskis janis@sec.t-labs.tu-berlin.de from Technische Universität Berlin [citation-needed] on: 2012-09-30 [citation-needed]
Reported on: 2013-04-04 [citation-needed]
Fixed on: Unknown
Fix released on: Unknown
Affected versions: regex:
Affected devices:
Affected manufacturers: Samsung [citation-needed]
Fixed versions:
Submission:

CVE numbers:
Coordinated disclosure?: false
Categories: system
Details: An exploit on MTK-based devices using the Framaroot app. Actually consists of three exploits: Boromir (camera-isp), Faramir (camera-sysr) and Barahir (Vcodec). [boromir-techglobule][archived]
Discovered by: alephzain [azimuth-exynos][archived] on: Unknown
Reported on: 2012-12-15 [azimuth-exynos][archived]
Fixed on: Unknown
Fix released on: Unknown
Affected versions: 4.0 (and possibly some later version [azimuth-exynos][archived] regex:
Affected devices: Many MTK-based devices [xda-framaroot-devices][archived]
Affected manufacturers: Samsung [azimuth-exynos][archived]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-08

CVE numbers: CVE-2012-6422 [nist-exynosroot]
Coordinated disclosure?: false
Categories: system
Details: A driver/kernel vulnerability allows the device /dev/exynos-mem access to all physical memory, meaning that any library with access to it can obtain root access [xda-developers-exynosroot]
Discovered by: alephzain [xda-developers-exynosroot] on: Unknown
Reported on: 2012-12-15 [xda-developers-exynosroot]
Fixed on: Unknown
Fix released on: Unknown
Affected versions: 4.0 (and possibly some later version [azimuth-exynos][archived] regex:
Affected devices: Samsung Galaxy S2 [xda-developers-exynosroot], Samsung Galaxy Note 2 [xda-developers-exynosroot], MEIZU MX [xda-developers-exynosroot]
Affected manufacturers: Samsung [xda-developers-exynosroot]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-08

CVE numbers:
Coordinated disclosure?: true
Categories: kernel, system
Details: A vulnerability in a modified kernel means that a series of exploits can be used to obtain access to the Trusted Execution Environment [msm8974-pt1][archived]
Discovered by: Gal Beniamini (laginimaineb) [msm8974-pt3][archived] on: Unknown
Reported on: 2014-09-19 [msm8974-pt3][archived]
Fixed on: 2014-10-01 [msm8974-pt3][archived]
Fix released on: Unknown
Affected versions: Crafted ROM based on 4.4.4 [msm8974-pt3][archived] regex: 4.4.4
Affected devices: All devices using the MSM8974 SoCMSM8974 SoC [msm8974-pt3][archived]
Affected manufacturers: Samsung [msm8974-pt3][archived], HTC [msm8974-pt3][archived], LG [msm8974-pt3][archived], Sony [msm8974-pt3][archived], OnePlus [msm8974-pt3][archived], Acer [msm8974-pt3][archived], Asus [msm8974-pt3][archived], Gionee [msm8974-pt3][archived], ZTE [msm8974-pt3][archived], Sharp [msm8974-pt3][archived], Pantech [msm8974-pt3][archived], Lenovo [msm8974-pt3][archived], Oppo [msm8974-pt3][archived], Vivo [msm8974-pt3][archived], IUNI [msm8974-pt3][archived], Hisense [msm8974-pt3][archived], Coolpad [msm8974-pt3][archived], Xiaomi [msm8974-pt3][archived], InFocus [msm8974-pt3][archived]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-09

CVE numbers: CVE-2015-3636 [avs-test-pingpong][archived]
Coordinated disclosure?: false
Categories:
Details: Wen Xu and wushi of KeenTeam discovered that users allowed to create ping sockets can use them to crash the system and, on 32-bit architectures, for privilege escalation. However, by default, no users on a Debian system have access to ping sockets. [dsa-3290]
Discovered by: Wen Xu and wushi of KeenTeam [dsa-3290] on: Unknown
Reported on: 2015-05-08 [xda-developers-pingpongroot]
Fixed on: Unknown
Fix released on: Unknown
Affected versions: regex:
Affected devices: Samsung Galaxy S6 Edge [xda-developers-pingpongroot], HTC One (M9) [xda-developers-pingpongroot], Samsung Galaxy S6 [xda-developers-pingpongroot]
Affected manufacturers: Samsung [xda-developers-pingpongroot], HTC [xda-developers-pingpongroot]
Fixed versions: 5.0.2,5.1.1 [xda-developers-pingpongroot]
Submission: by: Daniel R. Thomas, on: 2016-03-18; by: Stephan Kollmann, on: 2015-10-14

CVE numbers: CVE-2015-7888 [projectzero-489]
Coordinated disclosure?: true
Categories: system
Details: A path traversal vulnerability was found in the WifiHs20UtilityService. This service is running on a Samsung S6 Edge device, and may be present on other Samsung device models. WifiHs20UtilityService reads any files placed in /sdcard/Download/cred.zip, and unzips this file into /data/bundle. Directory traversal in the path of the zipped contents allows an attacker to write a controlled file to an arbitrary path as the system user. [citation-needed]
Discovered by: Mark Brand [projectzeroblog-huntinggalaxy] on: 2015-07-29 [citation-needed]
Reported on: 2015-07-29 [citation-needed]
Fixed on: 2015-10-22 [projectzero-489]
Fix released on: Unknown
Affected versions: regex:
Affected devices: Samsung S6 Edge and may be present in other Samsung device models [projectzero-489]
Affected manufacturers: Samsung [projectzero-489]
Fixed versions:
Submission: by: Daniel R. Thomas, on: 2016-03-18; by: Stephan Kollmann, on: 2015-10-14