CVE-2019-20531

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The Wi-Fi kernel drivers have an out-of-bounds Read. The Samsung IDs are SVE-2019-15692, SVE-2019-15693 December 2019...

CVE-2020-10850

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos chipsets software. The secure bootloade has a buffer overflow of the USB buffer, leading to arbitrary code execution. The Samsung ID is SVE-2019-15872 January 2020...

CVE-2020-10850

The CVE-2020-10850 entry describes a buffer overflow in the secure bootloader USB path on Samsung mobile devices with Exynos SoCs (Android O[8.x], P[9.0], Q[10.0]), enabling arbitrary code execution. The issue is tied to the secure bootloader’s handling of USB buffers (root cause: buffer overflow...

CVE-2020-10848

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos 9810 chipsets software. Arbitrary memory mapping exists in TEE. The Samsung ID is SVE-2019-16665 February 2020...

CVE-2020-10848

CVE-2020-10848 affects Samsung mobile devices running O(8.x), P(9.0) and Q(10.0) with Exynos 9810; the issue is an arbitrary memory mapping in the TrustZone/T EE. Root cause: memory mapping flaw in TEE. Impact per CVSS: HIGH across confidentiality, integrity, and availability. Affected Samsung de...

CVE-2020-10841

CVE-2020-10841 affects Samsung mobile devices with P(9.0)/Q(10.0) on Exynos 9610; root cause is an arbitrary kfree in the vipx and vertex drivers. Red Hat/NVD entries corroborate a kernel-free issue with potential high impact (CVE notes partial/confidentiality/availability risks, CVSSv3.1 base 7....

CVE-2020-10841

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is an arbitrary kfree in the vipx and vertex drivers. The Samsung ID is SVE-2019-16294 February 2020...

CVE-2020-10840

Summary: CVE-2020-10840 describes a kernel pointer leak in the vipx driver affecting Samsung mobile devices with Exynos 9610 (P9.0 and Q10.0). The Samsung internal ID is SVE-2019-16293 (February 2020). The Red Hat entry reiterates the same description. What is affected: Samsung mobile devices wit...

CVE-2020-10840

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is a kernel pointer leak in the vipx driver. The Samsung ID is SVE-2019-16293 February 2020...

CVE-2020-10836

CVE-2020-10836 affects Samsung mobile devices with Exynos (O(8.x), P(9.0), Q(10.0)). The Widevine Trustlet permits read/write access to arbitrary memory, indicating a memory-safety/Trustlet isolation flaw. CVSSv3.1 base score 9.8 (CRITICAL); access is network-based with no authentication required...

CVE-2020-10835

An issue was discovered on Samsung mobile devices with any before February 2020 for Exynos modem chipsets software. There is a buffer overflow in baseband CP message decoding. The Samsung IDs are SVE-2019-15816 and SVE-2019-15817 February 2020...

CVE-2020-10832

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. Kernel Wi-Fi drivers allow out-of-bounds Read or Write operations e.g., a buffer overflow. The Samsung IDs are SVE-2019-16125, SVE-2019-16134, SVE-2019-16158, SVE-2019-16159, SVE-2019-16319, SVE-2019-16320,...

CVE-2020-10832

The CVE-2020-10832 entry describes a vulnerability in Samsung mobile devices with P(9.0) Exynos chipsets where Kernel Wi-Fi drivers allow out-of-bounds Read/Write operations (buffer overflow). This affects the kernel Wi-Fi subsystem and is tied to several Samsung internal IDs (SVE-2019-16125, 161...

CVE-2019-20542: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with N7.1, O8.x, and P9.0 Exynos chipsets software. There is a stack overflow in the kernel driver. The Samsung ID is SVE-2019-15034 November 2019...

CVE-2020-10840: Missing Release of Memory after Effective Lifetime

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is a kernel pointer leak in the vipx driver. The Samsung ID is SVE-2019-16293 February 2020...

CVE-2019-20541: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The Wi-Fi kernel drivers have a stack overflow. The Samsung IDs are SVE-2019-14965, SVE-2019-14966, SVE-2019-14968, SVE-2019-14969, SVE-2019-14970, SVE-2019-14980, SVE-2019-14981, SVE-2019-14982, SVE-2019-14983,...

CVE-2019-20577: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...

CVE-2019-20572: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 Exynos chipsets software. loadkernel has a buffer overflow via untrusted data. The Samsung ID is SVE-2019-14939 September 2019...

CVE-2019-20578: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with P9.0 Exynos 9820 chipsets software. A Buffer overflow occurs when loading the UH Partition during Secure Boot. The Samsung ID is SVE-2019-14412 August 2019...

CVE-2019-20610: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered on Samsung mobile devices with N7.X and O8.X Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 April 2019...