The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly gain privileges via a malformed serializable object.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 | vendor advisory |
http://www.openwall.com/lists/oss-security/2016/08/05/1 | third party advisory mailing list |
http://www.securityfocus.com/bid/92330 | vdb entry third party advisory |