PT-2020-10592 · Samsung · Samsung Gallery

Published 2020-03-24 · Updated 2020-03-27 · CVE-2019-20616

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) and O(8.x) software

Description An issue was discovered where the Gallery leaks a thumbnail of Private Mode content.

Recommendations For Samsung mobile devices with N(7.x) software, update to a version that fixes this issue. For Samsung mobile devices with O(8.x) software, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the Gallery to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2019-20616

Affected Products

Samsung Gallery

References · 3

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20616 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20616 · Security Note