CVE-2020-35552

2020-12-1808:44:49

mitre

www.cve.org

samsung

gps

daemon

vulnerability

location

information

sensitive

configuration

file

sve-2020-18678

december

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

29.3%

JSON

An issue was discovered in the GPS daemon on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (non-Qualcomm chipsets) software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 (December 2020).

References

security.samsungmobile.com/securityUpdate.smsb