CVE-2018-16263

—

CVSS 3.1

8.8 high

EPSS

<1%p54

Published

Jan 22, 2020 (Jan 22, 2020)

Modified

Jun 17, 2026

Description

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

Vendors: linux
Products: tizen
Weakness: CWE-269
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.