PT-2017-7296 · Samsung · Samsung Galaxy S6

Natashenka · Published 2017-08-24 · Updated 2017-10-02 · CVE-2015-7896

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Samsung Galaxy S6 versions prior to October 2015 MR

Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and SIGSEGV, via a crafted image file.

Recommendations For Samsung Galaxy S6 versions prior to October 2015 MR, apply the October 2015 MR patch to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-7896

Affected Products

Samsung Galaxy S6

References · 5

• 🔥 https://exploit-db.com/exploits/38612 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7896 · Security Note
• http://securityfocus.com/bid/77425 · Note
• http://packetstormsecurity.com/files/134198/Samsung-Galaxy-S6-LibQjpeg-DoIntegralUpsample-Crash.html · Note
• https://bugs.chromium.org/p/project-zero/issues/detail?id=498&redir=1 · Note