CVE-2018-21090

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered on Samsung mobile devices with software through 2017-11-03 (S.LSI modem chipsets). The Exynos modem chipset has a baseband buffer overflow. The Samsung ID is SVE-2017-10745 (January 2018).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Apr 8, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-210917.5An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. Telecom has a System Crash via abnormal exception handlin CVE-2018-210926.5An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. A crafted AT command may be sent by the DeviceTest applic CVE-2018-210938.8Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.42, EX CVE-2018-210947.3Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.CVE-2018-210954.3Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210.CVE-2018-210967.4Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before CVE-2018-210979.8Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WA CVE-2018-210986.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-210998.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211008.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211018.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211028.8NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.