PT-2020-14510 · Samsung · Exynos 7885

Published 2020-07-07 · Updated 2021-07-21 · CVE-2020-15582

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 7885 chipsets) software

Description An issue was discovered in the Bluetooth Low Energy (BLE) component, which has a buffer overflow that can cause a deadlock or crash.

Recommendations For Samsung mobile devices with P(9.0) software, update to a version that fixes the buffer overflow issue in the BLE component. For Samsung mobile devices with Q(10.0) software, update to a version that fixes the buffer overflow issue in the BLE component. As a temporary workaround, consider disabling the Bluetooth Low Energy (BLE) component until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2020-15582

Affected Products

Exynos 7885

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-15582 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15582 · Vendor Advisory
• https://t.me/cvenotify/4926 · Telegram Post