{"id":"CVE-2018-10751","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-10751","generatedAt":"2026-10-28T19:47:10.715Z","title":"A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml payload.","description":"A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml payload. This is due to an integer overflow in memory allocation for this string. The Samsung ID is SVE-2018-11463.","published":"2018-05-29T20:29:02.000Z","lastModified":"2026-06-17T01:34:37.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H"},"cwe":["CWE-190"],"affected":["samsung/samsung mobile"],"epss":{"score":0.08726,"percentile":0.9512,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2018-05-23","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":44724,"kind":"exploit","title":"Samsung Galaxy S7 Edge - Overflow in OMACP WbXml String Extension Processing","url":"https://www.exploit-db.com/exploits/44724","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/android/dos/44724.txt","file":"exploits/android/dos/44724.txt","published":"2018-05-23","added":"2018-05-23","updated":"2018-05-23","author":"Google Security Research","type":"dos","platform":"android","port":null,"verified":true,"codes":["CVE-2018-10751"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1532"}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB (verified), so the technical barrier is gone even though the severity is medium and EPSS is 8.7%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/147841/Samsung-Galaxy-S7-Edge-OMACP-WbXml-String-Extension-Processing-Overflow.html","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://security.samsungmobile.com/securityUpdate.smsb","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/44724/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/147841/Samsung-Galaxy-S7-Edge-OMACP-WbXml-String-Extension-Processing-Overflow.html","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.samsungmobile.com/securityUpdate.smsb","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/44724/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-10751","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}