Vulnerability Description
Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung S6 Edge, allow local users to cause a denial of service (memory corruption) via a large (1) buffer or (2) size parameter.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Galaxy S6 Edge Firmware | - |
| Samsung | Galaxy S6 Edge | - |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/134106/Samsung-Seiren-Kernel-Driver-Buffer-Third Party AdvisoryVDB Entry
- https://code.google.com/p/google-security-research/issues/detail?id=491Mailing ListThird Party Advisory
- https://www.exploit-db.com/exploits/38556/ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/134106/Samsung-Seiren-Kernel-Driver-Buffer-Third Party AdvisoryVDB Entry
- https://code.google.com/p/google-security-research/issues/detail?id=491Mailing ListThird Party Advisory
- https://www.exploit-db.com/exploits/38556/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2015-7890?
CVE-2015-7890 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung S6 Edge, allow local users to cause a denial of service (memory corruption) via ...
How severe is CVE-2015-7890?
CVE-2015-7890 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-7890?
Check the references section above for vendor advisories and patch information. Affected products include: Samsung Galaxy S6 Edge Firmware, Samsung Galaxy S6 Edge.