Vulnerability record · CVE-2018-10751 · published 29 May 2018

CVE-2018-10751: Samsung mobile integer overflow vulnerability

Samsung · Samsung Mobile

A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml payload. This is due to an integer overflow in memory allocation for this string. The Samsung ID is SVE-2018-11463.

5.3 CVSS 3.0 Medium EPSS 8.6% · top 5.1% CWE-190 · Integer overflow

5.3CVSS 3.0 base score, v2 5.4

8.6%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Samsung Mobile Samsung

References

Link	Tags
http://packetstormsecurity.com/files/147841/Samsung-Galaxy-S7-Edge-OMACP-WbXml-String-Extension-Processing-Overflow.html	Third Party AdvisoryVDB Entry
https://security.samsungmobile.com/securityUpdate.smsb	Third Party Advisory
https://www.exploit-db.com/exploits/44724/	ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/147841/Samsung-Galaxy-S7-Edge-OMACP-WbXml-String-Extension-Processing-Overflow.html	Third Party AdvisoryVDB Entry
https://security.samsungmobile.com/securityUpdate.smsb	Third Party Advisory
https://www.exploit-db.com/exploits/44724/	ExploitThird Party AdvisoryVDB Entry

Track CVE-2018-10751 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-9139Samsung mobile memory buffer overflow vulnerabilityOn Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privileged process via a large fra…EPSS 2.5%30 Mar 2018 9.8CVE-2018-9143Samsung mobile out-of-bounds write vulnerabilityOn Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service leads to code execution in a privileged pr…EPSS 2.3%30 Mar 2018 9.8CVE-2017-5538Samsung mobile out-of-bounds read vulnerabilityThe kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos …EPSS 2.9%23 Mar 2017 9.8CVE-2016-9965Samsung mobile vulnerabilityLack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) softw…EPSS 1.9%16 Dec 2016 9.8CVE-2016-9966Samsung mobile vulnerabilityLack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) softw…EPSS 1.9%16 Dec 2016 9.8CVE-2016-9967Samsung mobile vulnerabilityLack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) softw…EPSS 1.9%16 Dec 2016 8.4CVE-2017-18020Samsung mobile improper input validation vulnerabilityOn Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader becaus…EPSS 0.42%4 Jan 2018 8.1CVE-2018-5210Samsung mobile out-of-bounds write vulnerabilityOn Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code exe…EPSS 1.8%4 Jan 2018

Source: NIST National Vulnerability Database (record CVE-2018-10751), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.