CVE-2018-10751

A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml payload. This is due to an integer overflow in memory allocation for this string. The Samsung ID is SVE-2018-11463.

• CWE-190

• http://packetstormsecurity.com/files/147841/Samsung-Galaxy-S7-Edge-OMACP-WbXml-String-Extension-Processing-Overflow.htmlThird Party Advisory, VDB Entry
• https://security.samsungmobile.com/securityUpdate.smsbThird Party Advisory
• https://www.exploit-db.com/exploits/44724/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/147841/Samsung-Galaxy-S7-Edge-OMACP-WbXml-String-Extension-Processing-Overflow.htmlThird Party Advisory, VDB Entry
• https://security.samsungmobile.com/securityUpdate.smsbThird Party Advisory
• https://www.exploit-db.com/exploits/44724/Exploit, Third Party Advisory, VDB Entry

Published

May 29, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10746An issue was discovered on D-Link DSL-3782 EU 1.01 devices. …
• CVE-2018-10747An issue was discovered on D-Link DSL-3782 EU 1.01 devices. …
• CVE-2018-10748An issue was discovered on D-Link DSL-3782 EU 1.01 devices. …
• CVE-2018-10749An issue was discovered on D-Link DSL-3782 EU 1.01 devices. …
• CVE-2018-1075ovirt-engine up to version 4.2.3 is vulnerable to an unfilte…5
• CVE-2018-10750An issue was discovered on D-Link DSL-3782 EU 1.01 devices. …
• CVE-2018-10752The Tagregator plugin 0.6 for WordPress has stored XSS via t…
• CVE-2018-10753Stack-based buffer overflow in the delayed_output function i…9.8
• CVE-2018-10754Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-10755Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-10756Use-after-free in libtransmission/variant.c in Transmission …7.8
• CVE-2018-10757CSP MySQL User Manager 2.3.1 allows SQL injection, and resul…