Lucene search

ZdiCVE-2020-8860

HistoryFeb 22, 2020 - 12:15 a.m.

CVE-2020-8860

2020-02-2200:15:10

CWE-787

CWE-121

zdi

web.nvd.nist.gov

139

vulnerability

cve-2020-8860

samsung galaxy s10

remote code execution

exynos chipset

baseband processor

security

nvd

zdi-can-9658

CVSS2

5.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

38.8%

JSON

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The specific flaw exists within the Call Control Setup messages. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the baseband processor. Was ZDI-CAN-9658.

Affected configurations

Nvd

Vulners

Node

googleandroidMatch8.0

googleandroidMatch8.1

googleandroidMatch9.0

googleandroidMatch10.0

AND

samsunggalaxy_s10

VendorProductVersionCPE
googleandroid8.0cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
googleandroid8.1cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
googleandroid9.0cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
googleandroid10.0cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
samsunggalaxy_s10*cpe:2.3:h:samsung:galaxy_s10:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	8.0	cpe:2.3:o:google:android:8.0:::::::*
google	android	8.1	cpe:2.3:o:google:android:8.1:::::::*
google	android	9.0	cpe:2.3:o:google:android:9.0:::::::*
google	android	10.0	cpe:2.3:o:google:android:10.0:::::::*
samsung	galaxy_s10	*	cpe:2.3:h:samsung:galaxy_s10::::::::

CNA Affected

[
  {
    "product": "Galaxy S10",
    "vendor": "Samsung",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets"
      }
    ]
  }
]

References

security.samsungmobile.com/securityUpdate.smsb

www.zerodayinitiative.com/advisories/ZDI-20-255/

CVSS2

5.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

38.8%

JSON

Related for CVE-2020-8860