Vulnerability Details CVE-2017-5538
The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.028
EPSS Ranking 85.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017
- http://www.openwall.com/lists/oss-security/2017/01/19/3
- http://www.openwall.com/lists/oss-security/2017/01/20/2
- http://www.securityfocus.com/bid/95674
- http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017
- http://www.openwall.com/lists/oss-security/2017/01/19/3
- http://www.openwall.com/lists/oss-security/2017/01/20/2
- http://www.securityfocus.com/bid/95674
Products affected by CVE-2017-5538
-
cpe:2.3:o:samsung:samsung_mobile:6.0
-
cpe:2.3:o:samsung:samsung_mobile:7.0