CVE-2017-18673

Severity: low (CVSS 2.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-07 · updated 2026-06-17
Weakness: CWE-20

Description

An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can disable the Location service on a locked device, making it impossible for the rightful owner to find a stolen device. The Samsung ID is SVE-2017-8524 (May 2017).

Affected products

Android: 7.0, 7.1.0, 7.1.1, 7.1.2

References

https://security.samsungmobile.com/securityUpdate.smsb
https://security.samsungmobile.com/securityUpdate.smsb

Get alerted when CVE-2017-18673 or the next vulnerability affects your stack