CVE-2020-10837: Improper Input Validation

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 with TEEGRIS software. The Esecomm Trustlet allows a stack overflow and arbitrary code execution. The Samsung ID is SVE-2019-15984 February 2020...

PT-2020-10555

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 Exynos 9820 chipsets software Description A buffer overflow issue occurs when loading the UH Partition during Secure Boot, potentially affecting Samsung mobile devices. Recommendations For Samsung mobile device...

PT-2020-10545

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x and P9.0 devices Exynos and Qualcomm chipsets software Description A race condition causes a Use-After-Free issue. This issue affects Samsung mobile devices with O8.x and P9.0 devices, including both Exynos and...

CVE-2020-10846: Improper Authentication

An issue was discovered on Samsung mobile devices with P9.x and Q10.x software. Attackers can enable the OEM unlock feature on a KG-enrolled devices, leading to potentially unwanted binaries being downloaded. The Samsung ID is SVE-2019-16554 February 2020...

CVE-2020-10832: Out-of-bounds Read

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. Kernel Wi-Fi drivers allow out-of-bounds Read or Write operations e.g., a buffer overflow. The Samsung IDs are SVE-2019-16125, SVE-2019-16134, SVE-2019-16158, SVE-2019-16159, SVE-2019-16319, SVE-2019-16320,...

CVE-2019-20589: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SKPM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14892 August 2019...

CVE-2019-20544: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos chipsets software. There is an out-of-bounds write in the ICCC Trustlet. The Samsung ID is SVE-2019-15274 November 2019...

CVE-2019-20557: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Attackers can bypass Factory Reset Protection FRP via a SIM card by blocking the PUK code. The Samsung ID is SVE-2019-15262 October 2019...

CVE-2019-20535: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. A connection to a new Bluetooth devices can be established from the lock screen. The Samsung ID is SVE-2019-15533 December 2019...

CVE-2019-20562: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with P9.0 with TEEGRIS software. There is a buffer overflow in the BIOSUB Trustlet. The Samsung ID is SVE-2019-15264 October 2019...

CVE-2020-10845: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. There is a race condition leading to a use-after-free in MTP. The Samsung ID is SVE-2019-16520 February 2020...

PT-2020-12354

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Description An issue allows attackers to trigger an update to arbitrary touch-screen firmware on affected devices...

CVE-2019-20560: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. The BIOSUB Trustlet has an out of bounds write. The Samsung ID is SVE-2019-15261 October 2019...

PT-2020-10552

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 software Description An issue was discovered that allows a downgrade or dictionary attack due to the WPA3 handshake feature. Recommendations For Samsung mobile devices with P9.0 software, update the software to...

CVE-2019-20609: Missing Authorization

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can use Smartwatch to view Secure Folder notification content. The Samsung ID is SVE-2019-13899 April 2019...

CVE-2019-20595: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with P9.0 software. Quick Panel allows enabling or disabling the Bluetooth stack without authentication. The Samsung ID is SVE-2019-14545 July 2019...

CVE-2019-20552: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via an RCS call. The Samsung ID is SVE-2019-15035 October 2019...

CVE-2019-20618: Improper Authentication

An issue was discovered on Samsung mobile devices with P9.0 software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 March 2019...

CVE-2019-20617: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 software. Secure Folder leaks preview data of recent apps. The Samsung ID is SVE-2018-13764 March 2019...

CVE-2019-20576: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered on Samsung mobile devices with P9.0 software. The MemorySaver Content Provider allows SQL injection. The Samsung ID is SVE-2019-14365 August 2019...