CVE-2018-21081 An issue was discovered on Samsung mobile devices with N(7.x) software. In Dual Messenger, the second app can use the runtime permissions of the first app without a user's consent. The Samsung ID is S...
CriticalCVSS 9.1
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on Samsung mobile devices with N(7.x) software. In Dual Messenger, the second app can use the runtime permissions of the first app without a user's consent. The Samsung ID is SVE-2017-11018 (March 2018).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | = 7.0 | No fix listed |
| Google Android | = 7.1.0 | No fix listed |
| Google Android | = 7.1.1 | No fix listed |
| Google Android | = 7.1.2 | No fix listed |
References
- security.samsungmobile.com vendor-advisory