CVE-2018-21058: Google Android

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890/8996 chipsets) software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension (CE) is not used. The Samsung ID is SVE-2018-12761 (September 2018).

Affected products

• Google Android: version 7.0 only; version 8.0 only

Published 2020-04-08. Last modified 2026-06-17.