(Pwn2Own) Samsung Galaxy S21 Improper Error Handling Remote Code Execution Vulnerability

February 18th, 2022
ZDI-22-380 ZDI-CAN-15916

CVE ID

CVSS Score

4.6 AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Vendors

Samsung

Affected Products

Galaxy S21

Vulnerability Details

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 phones. User interaction is required to exploit this vulnerability in that the target must visit a malicious page.

The specific flaw exists within the handling of errors when accessing trusted URLs. An attacker can force a page redirection from HTTPS to HTTP. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user.

Additional Details

The patch was applied in server side on November 30th, 2021


Disclosure Timeline

  • 2021-12-30 - Vulnerability reported to vendor
  • 2022-02-18 - Coordinated public release of advisory

Credit

TBD

Back to Advisories