PT-2020-10601 · Samsung · Exynos

Published 2020-03-24 · Updated 2021-07-21 · CVE-2019-20625

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.1) and O(8.x) software

Description An issue was discovered that allows information disclosure through the ion debugfs driver on Samsung mobile devices with Exynos chipsets.

Recommendations For Samsung mobile devices with N(7.1) software, update to a version that fixes the issue. For Samsung mobile devices with O(8.x) software, update to a version that fixes the issue. As a temporary workaround, consider restricting access to the ion debugfs driver until a patch is available.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2019-20625

Affected Products

Exynos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-20625 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20625 · Vendor Advisory