An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the SamFAIL issue. The Samsung ID is SVE-2017-10465 (November 2017).
The product does not validate or incorrectly validates the integrity check values or “checksums” of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Android | 7.0 (including) | 7.0 (including) | |
| Android | 7.1.0 (including) | 7.1.0 (including) | |
| Android | 7.1.1 (including) | 7.1.1 (including) | |
| Android | 7.1.2 (including) | 7.1.2 (including) |