Vulnerability Database

309,134

Total vulnerabilities in the database

CVE-2018-21051

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. There is an invalid free in the fingerprint Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12853 (October 2018).

  • Published: Apr 8, 2020
  • Updated: Nov 9, 2025
  • CVE: CVE-2018-21051
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
google / android 7.1.0 7.1.0.x
google / android 7.1.2 7.1.2.x
google / android 7.0 7.0.x
google / android 8.0 8.0.x
google / android 7.1.1 7.1.1.x
google / android 8.1 8.1.x