VYPR
← All advisories
High severity8.1NVD Advisory· Published Jan 22, 2020· Updated Jun 17, 2026

CVE-2018-16267

CVE-2018-16267

Description

The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to improper D-Bus security policy configurations. Such actions include the triggering system poweroff menu, and prompting a popup with arbitrary strings. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

Affected products

19
  • Linux/Tizen16 versions
    cpe:2.3:o:linux:tizen:1.0:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:o:linux:tizen:1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:1.0:m1:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.3.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.3:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.4:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:3.0:m2:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:3.0:m3:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:4.0:m1:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:4.0:m2:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:4.0:m3:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:5.0:*:*:*:*:*:*:*
  • Tizen/Tizendescription
  • Tizen/system-popupllm-create
    Range: <5.0 M1, and Samsung Galaxy Gear series before build RE2
  • Samsung Mobile/Galaxy Gearllm-fuzzy
    Range: <RE2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.