PT-2020-10574 · Samsung · Bixby

Published 2020-03-24 · Updated 2021-07-21 · CVE-2019-20598

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O(8.x) software

Description An issue was discovered where Bixby leaks the keyboard's learned words and the clipboard contents via the lock screen.

Recommendations For Samsung mobile devices with O(8.x) software, consider disabling Bixby or restricting its access to sensitive information as a temporary workaround until a patch is available.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-20598

Affected Products

Bixby

References · 3

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20598 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20598 · Vendor Advisory