CVE-2015-8546

Опубликовано: 10 апр. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Galaxy Note5 with the Shannon333 chipset. There is a stack-based buffer overflow in the baseband process that is exploitable for remote code execution via a fake base station. The Samsung ID is SVE-2015-5123 (December 2015).

Ссылки

https://security.samsungmobile.com/securityUpdate.smsb
Vendor Advisory
https://security.samsungmobile.com/securityUpdate.smsb
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:samsung:galaxy_note5:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:galaxy_s6:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:galaxy_s6_edge:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:galaxy_s6_edge\+:-:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01856

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-v7r4-vxch-fv5j

github

больше 3 лет назад