PatchTheCVECVE-2012-6422: The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an
CVE-2012-6422 is a high-severity flaw (CVSS 9.3) affecting mx, galaxy note 2, galaxy s2. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
Why this priority
- Critical severity
- EPSS top 3%: very likely to be exploited
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 9.3 (High) |
| EPSS exploit chance | 15.1% (top 3%) |
| CISA exploited list | No |
| Weakness | CWE-264 |
| Published | 2012-12-18 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2012-6422?
mx: mitigate or apply the listed mitigation; galaxy note 2: mitigate or apply the listed mitigation; galaxy s2: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2012-6422 being exploited?
CVE-2012-6422 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2012-6422 affect?
CVE-2012-6422 affects mx, galaxy note 2, galaxy s2. Severity is high (CVSS 9.3). The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary
How urgent is CVE-2012-6422?
Priority 62/100. Critical severity; EPSS top 3%: very likely to be exploited; Public exploit reference
Software pages
Android vulnerabilities · Samsung vulnerabilities