CVE-2017-18647: Google Android

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered on Samsung mobile devices with M(6,x) and N(7.0) software. The TA Scrypto v1.0 implementation in Secure Driver has a race condition with a resultant buffer overflow. The Samsung IDs are SVE-2017-8973, SVE-2017-8974, and SVE-2017-8975 (November 2017).

Affected products

• Google Android: version 6.0 only; version 6.0.1 only; version 7.0 only

Published 2020-04-07. Last modified 2026-06-17.