Buffer Overflow Vulnerability in Samsung S6 Edge Audio Driver
CVE-2015-7890
5.5MEDIUM
Key Information:
- Vendor
Samsung
- Status
- Vendor
- CVE Published:
- 12 February 2020
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2015-7890?
The vulnerability arises from multiple buffer overflows in the esa_write function within the Exynos Seiren Audio driver. This issue can be exploited by local users who provide excessively large buffer or size parameters, resulting in memory corruption and potential denial of service conditions. The affected product, primarily utilized in the Samsung S6 Edge, demands immediate attention to mitigate risks associated with this flaw.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.