PT-2020-13713 · Samsung+1 · Exynos+1

Published 2020-06-04 · Updated 2021-07-21 · CVE-2020-13832

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q(10.0) software

Description An issue was discovered that allows arbitrary code execution due to memory disclosure in the Widevine Trustlet on Samsung mobile devices with Q(10.0) software, specifically those with TEEGRIS on Exynos chipsets.

Recommendations For Samsung mobile devices with Q(10.0) software, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

RCE

Weakness Enumeration

CWE-119

CWE-20

Related Identifiers

CVE-2020-13832

Affected Products

Exynos

Widevine Trustlet

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-13832 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-13832 · Vendor Advisory