CVE-2012-6422
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices,...
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
Exploit likelihood
What each source reports
NVD Score used
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
- Record
CVE-2012-6422- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
- Record
CVE-2012-6422- Updated
- 2026-11-02
EUVDEUVD-2012-6277 No score
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
- Record
EUVD-2012-6277- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x6p7-m2w8-2w25 No score
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices,...
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
- Record
GHSA-x6p7-m2w8-2w25- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | wired0ut/CVE-2012-6422 | 2025-08-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6422 is a high vulnerability (CVSS 9.3) in Meizu Mx, published December 18, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 15.1%, the 96th percentile. No source names a fixed version.
References
securityweek.com/new-vulnerability-exposed-samsungs-android-devices
project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible
forum.xda-developers.com/showthread.php?p=35469999
arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones
sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices
osvdb.org/88467
nvd.nist.gov/vuln/detail/CVE-2012-6422
github.com/advisories/GHSA-x6p7-m2w8-2w25