PT-2020-10556 · Samsung · Samsung Gallery

Published 2020-03-24 · Updated 2021-07-21 · CVE-2019-20579

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) software Samsung mobile devices with O(8.x) software Samsung mobile devices with P(9.0) software

Description An issue was discovered on Samsung mobile devices where the Gallery allows attackers to enable Location information sharing from the lock screen.

Recommendations For Samsung mobile devices with N(7.x) software, update the software to disable the vulnerable feature. For Samsung mobile devices with O(8.x) software, update the software to disable the vulnerable feature. For Samsung mobile devices with P(9.0) software, update the software to disable the vulnerable feature. As a temporary workaround, consider restricting access to the Gallery from the lock screen until a patch is available.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-20579

Affected Products

Samsung Gallery

References · 4

• https://osv.dev/vulnerability/CVE-2019-20579 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20579 · Security Note
• https://t.me/cvenotify/2086 · Telegram Post