PT-2020-10549 · Samsung · Exynos+1

Published 2020-03-24 · Updated 2020-03-27 · CVE-2019-20572

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software

Description An issue was discovered on Samsung mobile devices, where the load kernel has a buffer overflow via untrusted data.

Recommendations For Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-20572

Affected Products

Exynos

Samsung Mobile Devices

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-20572 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20572 · Vendor Advisory
• https://t.me/cvenotify/2080 · Telegram Post