VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jan 22, 2020· Updated Jun 17, 2026

CVE-2018-16268

CVE-2018-16268

Description

The SoundServer/FocusServer system services in Tizen allow an unprivileged process to perform media-related system actions, due to improper D-Bus security policy configurations. Such actions include playing an arbitrary sound file or DTMF tones. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

Affected products

19
  • Linux/Tizen16 versions
    cpe:2.3:o:linux:tizen:1.0:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:o:linux:tizen:1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:1.0:m1:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.3.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.3:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.4:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:3.0:m2:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:3.0:m3:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:4.0:m1:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:4.0:m2:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:4.0:m3:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:5.0:*:*:*:*:*:*:*
  • Tizen/Tizendescription
  • Tizen/SoundServer/FocusServerllm-create
    Range: <5.0 M1
  • Samsung Mobile/Galaxy Gearllm-fuzzy
    Range: <RE2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.