Samsung Galaxy s6 Firmware vulnerabilities

13 CVEs affecting Samsung Galaxy s6 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-14745, published 2019-03-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-14745, published 2019-03-21. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to…
CVE-2016-2566, published 2017-04-13. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081.
CVE-2018-14852, published 2018-12-17. Medium severity, CVSS 6.3. EPSS: 1% chance of exploitation in the next 30 days. Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has…
CVE-2018-14856, published 2018-12-17. Medium severity, CVSS 6.3. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker…
CVE-2018-14855, published 2018-12-17. Medium severity, CVSS 6.3. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker (who has obtained code…
CVE-2018-14854, published 2018-12-17. Medium severity, CVSS 6.3. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker…
CVE-2018-14853, published 2018-12-17. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an…
CVE-2016-4031, published 2017-04-13. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and…
CVE-2016-4030, published 2017-04-13. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and…
CVE-2016-4032, published 2017-04-13. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and…

Latest

CVE-2016-2567, published 2017-04-13. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an…