secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an "exceptional URL" in the query string, as demonstrated by the http://should-have-been-filtered.example.com/?http://google.com URL.
2017-04-13T16:59:01.143
2025-04-20T01:37:25.860
Deferred
CVSSv3.0: 3.3 (LOW)
AV:L/AC:L/Au:N/C:N/I:P/A:N
3.9
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | samsung | galaxy_s6_firmware | g920fxxu2coh2 | Yes |
Hardware | samsung | galaxy_s6 | - | No |
Operating System | samsung | galaxy_note_3_firmware | n9005xxugbob6 | Yes |
Hardware | samsung | galaxy_note_3 | - | No |