CVE-2018-16263

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP...

8.8 High

CVE-2018-16263 is a high vulnerability (CVSS 8.8) in Linux Tizen, published January 22, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 55th percentile. No source names a fixed version.

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.78%Down 0.1 points since Apr 14, 2021

What each source reports

NVD Score used 8.8

Record: CVE-2018-16263
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 5.8 MediumAV:A/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-269
Updated: 2026-11-02

CVE List No score

Record: CVE-2018-16263
Updated: 2026-11-02

EUVDEUVD-2018-8115 No score

Record: EUVD-2018-8115
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5h96-c4j5-cc68 No score

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP...

Record: GHSA-5h96-c4j5-cc68
Updated: 2026-11-02

Affected products

linux tizen

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD