PT-2020-12720 · Samsung · Mldap Trustlet+1

Published 2020-04-08 · Updated 2020-04-10 · CVE-2020-11604

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software

Description An issue was discovered in the MLDAP Trustlet, which is affected by an Out-of-bounds read.

Recommendations For Samsung mobile devices with P(9.0) and Q(10.0) software, consider restricting access to the MLDAP Trustlet until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-11604

Affected Products

Mldap Trustlet

Teegris

References · 4

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11604 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11604 · Security Note
• https://t.me/cvenotify/2555 · Telegram Post