PT-2020-8216
CVE-2017-18667
·
Published
2020-04-07
·
Updated
2020-04-08
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
Samsung mobile devices with Android versions 4.4 through 7.x
Description:
An issue allows attackers to prevent users from learning that SMS storage space has been exhausted on affected devices.
Recommendations:
For Android version 4.4, update the SMS storage management to properly notify users when storage space is exhausted.
For Android version 5.0/5.1, modify the SMS app to alert users when the storage limit is reached.
For Android version 6.0, adjust the system settings to display a notification when SMS storage is full.
For Android version 7.x, change the default behavior to warn users before the SMS storage space is exhausted.
As a temporary workaround, consider restricting the number of SMS messages that can be stored on the device until a proper fix is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾