PT-2020-10567 · Samsung · Skpm Trustlet

Published 2020-03-24 · Updated 2020-03-30 · CVE-2019-20589

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O(8.x) and P(9.0) software

Description An issue was discovered that leads to type confusion in the SKPM Trustlet, resulting in arbitrary code execution.

Recommendations For Samsung mobile devices with O(8.x) software, update to a version that addresses the type confusion issue in the SKPM Trustlet. For Samsung mobile devices with P(9.0) software, update to a version that addresses the type confusion issue in the SKPM Trustlet.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2019-20589

Affected Products

Skpm Trustlet

References · 3

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20589 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20589 · Vendor Advisory