cve/2017/CVE-2017-18648.md

CVE-2017-18648

Description

An issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x) software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 (November 2017).

POC

Reference

• https://security.samsungmobile.com/securityUpdate.smsb
• https://security.samsungmobile.com/securityUpdate.smsb

Github

No PoCs found on GitHub currently.