PT-2020-10587 · Samsung · Exynos

Published 2020-03-24 · Updated 2020-03-30 · CVE-2019-20611

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) Samsung mobile devices with O(8.x) Samsung mobile devices with Go(8.1) Samsung mobile devices with P(9.0) Samsung mobile devices with Go(9.0)

Description A baseband stack overflow issue leads to arbitrary code execution on Samsung mobile devices with Exynos chipsets.

Recommendations For Samsung mobile devices with N(7.x), update to a version that fixes the baseband stack overflow issue. For Samsung mobile devices with O(8.x), update to a version that fixes the baseband stack overflow issue. For Samsung mobile devices with Go(8.1), update to a version that fixes the baseband stack overflow issue. For Samsung mobile devices with P(9.0), update to a version that fixes the baseband stack overflow issue. For Samsung mobile devices with Go(9.0), update to a version that fixes the baseband stack overflow issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-20611

Affected Products

Exynos

References · 3

• https://osv.dev/vulnerability/CVE-2019-20611 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20611 · Security Note