PT-2020-16059 · Samsung · Samsung Mobile Devices

Published 2020-09-11 · Updated 2020-09-21 · CVE-2020-25279

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O(8.x) Samsung mobile devices with P(9.0) Samsung mobile devices with Q(10.0)

Description An issue was discovered on Samsung mobile devices where the baseband component has a buffer overflow via an abnormal SETUP message, leading to execution of arbitrary code.

Recommendations For Samsung mobile devices with O(8.x), update the baseband component to prevent buffer overflow. For Samsung mobile devices with P(9.0), update the baseband component to prevent buffer overflow. For Samsung mobile devices with Q(10.0), update the baseband component to prevent buffer overflow.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-25279

Affected Products

Samsung Mobile Devices

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-25279 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25279 · Vendor Advisory