CVE-2019-20542

CVE-2019-20542 affects Samsung mobile devices running Android N (7.1), O (8.x), and P (9.0) on Exynos chipsets. The issue is a kernel driver stack overflow. No exploit details or specific vulnerable components/version numbers are provided beyond this description. No remediation or patch version i...

CVE-2019-20540

CVE-2019-20540 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) Exynos software. The issue is a buffer over-read in the core touch screen driver that can lead to a possible information leak. Connected sources corroborate the same description; no explicit patch/version details or ...

CVE-2019-20539

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Broadcom chipsets software. An out-of-bounds Read in the Wi-Fi vendor command leads to an information leak. The Samsung ID is SVE-2019-14869 November 2019...

o-zza.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1123454 Security Researcher geeknik Helped patch 8957 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting o-zza.ru website and its...

CVE-2019-20547: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. Data may leak via a Bluetooth debug command. The Samsung ID is SVE-2019-15398 November 2019...

CVE-2019-20603: NULL Pointer Dereference

An issue was discovered on Samsung mobile devices with N7.x, O8.0, and P9.0 Qualcomm chipsets software. The ESECOMM Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13950 May 2019...

CVE-2019-20625: Insertion of Sensitive Information into Log File

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

CVE-2019-20587: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software. There is type confusion in the MLDAP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14867 August 2019...

CVE-2019-20586: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software. There is type confusion in the FINGERPRINT Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14864 August 2019...

CVE-2019-20563: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. The SECFR trustlet has an out of bounds write. The Samsung ID is SVE-2019-15272 October 2019...

CVE-2019-20599: Missing Authorization

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Voice Assistant mishandles the notification audibility of a secured app. The Samsung ID is SVE-2018-13326 May 2019...

CVE-2019-20535: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. A connection to a new Bluetooth devices can be established from the lock screen. The Samsung ID is SVE-2019-15533 December 2019...

PT-2020-10530

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Description An issue allows attackers to bypass Factory Reset Protection FRP using an external keyboard. Recommendations For Samsung mobile devices with O8.x software, consider disabling the use of...

CVE-2019-20590: Integer Underflow (Wrap or Wraparound)

An issue was discovered on Samsung mobile devices with O8.x Qualcomm chipsets software. There is an integer underflow in the Secure Storage Trustlet. The Samsung ID is SVE-2019-13952 July 2019...

CVE-2019-20589: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SKPM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14892 August 2019...

CVE-2019-20544: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos chipsets software. There is an out-of-bounds write in the ICCC Trustlet. The Samsung ID is SVE-2019-15274 November 2019...

CVE-2019-20557: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Attackers can bypass Factory Reset Protection FRP via a SIM card by blocking the PUK code. The Samsung ID is SVE-2019-15262 October 2019...

CVE-2019-20598: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with O8.x software. Bixby leaks the keyboard's learned words, and the clipboard contents, via the lock screen. The Samsung IDs are SVE-2018-12896, SVE-2018-12897 May 2019...

CVE-2019-20571: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x with TEEGRIS software. There is type confusion in the WVDRM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14885 September 2019...

CVE-2020-10845: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. There is a race condition leading to a use-after-free in MTP. The Samsung ID is SVE-2019-16520 February 2020...