CVE-2018-21062: 
NixOS vulnerability analysis and mitigation

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. When biometric authentication is disabled, an attacker can view Streams content (e.g., a Gallery slideshow) of a locked Secure Folder via a connection to an external device. The vulnerability was identified in August 2018 with Samsung ID SVE-2018-11766 (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.6 MEDIUM (Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) and CVSS v2.0 Base Score of 2.1 LOW (Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N). The vulnerability is classified under CWE-287 (Improper Authentication) (NVD).

The vulnerability allows unauthorized access to Streams content within a locked Secure Folder when connected to an external device, potentially exposing sensitive user data stored in the Gallery slideshow (NVD).

The vulnerability affects Samsung mobile devices running Android N(7.x) and O(8.x) software versions. Users should ensure their devices are updated with the latest security patches provided by Samsung (Samsung Mobile Security).