CVE-2015-7888: Samsung Galaxy s6 Edge Firmware

High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in the name of a file, compressed into a zipped file named cred.zip, and downloaded to /sdcard/Download.

Affected products

• Samsung Galaxy s6 Edge Firmware: version g925vvru1aoe2 only

Published 2017-06-07. Last modified 2026-06-17.