CVE-2018-21054

CRITICAL

9.8

CVSS Score

Published: April 8, 2020 at 05:50 PM UTC

Updated: June 17, 2026 at 01:54 AM UTC

1 product affected across 1 vendorAndroid· also runs on 13 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 0.4%

Description

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except exynos9610/9820 in all Platforms, M(6.0) except MSM8909 SC77xx/9830 exynos3470/5420, N(7.0) except MSM8939, N(7.1) except MSM8996 SDM6xx/M6737T software. There is an integer underflow with a resultant buffer overflow in eCryptFS. The Samsung ID is SVE-2017-11857 (September 2018).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

6.0 7.0 7.1 7.1.0 7.1.1 7.1.2 8.0 8.1

mediatek-m6737t (environment) · qualcomm-msm8909 (environment) · qualcomm-msm8939 (environment) · qualcomm-msm8996 (environment) · qualcomm-msm9830 (environment) · qualcomm-sdm6xx (environment) · samsung-exynos-3470 (environment) · samsung-exynos-5420 (environment) · samsung-exynos-9610 (environment) · samsung-exynos-9820 (environment) · unisoc-sc7715 (environment) · unisoc-sc7730 (environment) · unisoc-sc7731 (environment)