PT-2020-17341 · Samsung · Finder

Published 2020-12-18 · Updated 2020-12-21 · CVE-2020-35548

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Finder on Samsung mobile devices with Q(10.0) software

Description An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software, where a call to a non-existent provider allows attackers to cause a denial of service.

Recommendations For Finder on Samsung mobile devices with Q(10.0) software, consider restricting access to the provider call functionality until a patch is available. As a temporary workaround, disabling the non-existent provider call may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2020-35548

Affected Products

Finder

References · 6

• https://osv.dev/vulnerability/CVE-2020-35548 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35548 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://t.me/cvenotify/7490 · Telegram Post
• https://t.me/cvenotify/7316 · Telegram Post
• https://t.me/cibsecurity/21057 · Telegram Post