CVE-2012-6422

Samsung Galaxy S2, Galaxy Note 2, MEIZU MX - Arbitrary Physical Memory Access via /dev/exynos-mem Weak Permissions

Title source: llm

Description

The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.

References (7)

Core 7

Core References

Various Sources x_refsource_misc

http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices

Various Sources x_refsource_misc

http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible

Various Sources x_refsource_misc

http://forum.xda-developers.com/showthread.php?t=2051290

Various Sources x_refsource_misc

http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/

Exploit x_refsource_misc

http://forum.xda-developers.com/showthread.php?p=35469999

Various Sources x_refsource_misc

http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/88467

Scores

EPSS 0.0661

EPSS Percentile 91.3%

Details

CWE

CWE-264

Status published

Products (3)

meizu/mx

samsung/galaxy_note_2

samsung/galaxy_s2

Published Dec 18, 2012

Tracked Since Feb 18, 2026