Description
An issue was discovered on Samsung mobile devices with N(7.x) software. Persona has an unprotected API that allows launch of any activity with system privileges. The Samsung ID is SVE-2017-9000 (June 2017).
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://security.samsungmobile.com/securityUpdate.smsb
Scores
CVSS v3
7.5
EPSS
0.0033
EPSS Percentile
25.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-276
Status
published
Products (4)
google/android
7.0
google/android
7.1.0
google/android
7.1.1
google/android
7.1.2
Published
Apr 07, 2020
Tracked Since
Feb 18, 2026