Remote Code Execution Vulnerability in Samsung Galaxy S9 by Samsung

CVE-2019-6741

Summary

A remote code execution vulnerability exists in Samsung Galaxy S9 devices that have not been updated beyond the January 2019 Security Update. The flaw is located within the captive portal, which can be exploited by attackers through manipulated HTML. To capitalize on this flaw, users must connect to a malicious wireless network, allowing attackers to redirect users to their own pages. Once the user interacts with the malicious page, arbitrary code can be executed within the context of the current process, posing significant security risks to devices affected by this vulnerability.

References