PT-2020-10552

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 software Description An issue was discovered that allows a downgrade or dictionary attack due to the WPA3 handshake feature. Recommendations For Samsung mobile devices with P9.0 software, update the software to...

CVE-2019-20609: Missing Authorization

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can use Smartwatch to view Secure Folder notification content. The Samsung ID is SVE-2019-13899 April 2019...

CVE-2019-20595: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with P9.0 software. Quick Panel allows enabling or disabling the Bluetooth stack without authentication. The Samsung ID is SVE-2019-14545 July 2019...

CVE-2019-20552: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via an RCS call. The Samsung ID is SVE-2019-15035 October 2019...

CVE-2019-20618: Improper Authentication

An issue was discovered on Samsung mobile devices with P9.0 software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 March 2019...

CVE-2019-20617: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 software. Secure Folder leaks preview data of recent apps. The Samsung ID is SVE-2018-13764 March 2019...

CVE-2019-20576: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered on Samsung mobile devices with P9.0 software. The MemorySaver Content Provider allows SQL injection. The Samsung ID is SVE-2019-14365 August 2019...

CVE-2019-20575: Use of Password Hash With Insufficient Computational Effort

An issue was discovered on Samsung mobile devices with P9.0 software. The WPA3 handshake feature allows a downgrade or dictionary attack. The Samsung ID is SVE-2019-14204 August 2019...

CVE-2019-20578: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with P9.0 Exynos 9820 chipsets software. A Buffer overflow occurs when loading the UH Partition during Secure Boot. The Samsung ID is SVE-2019-14412 August 2019...

CVE-2019-20585: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SECFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14851 August 2019...

CVE-2019-20583: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the EXTFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14847 August 2019...

CVE-2019-20534: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can view home-screen wallpaper by adjusting the brightness of a locked screen. The Samsung ID is SVE-2019-15540 December 2019...

CVE-2019-20623: Use of Uninitialized Resource

An issue was discovered on Samsung mobile devices with N7.1, O8.x, and P9.0 software. Gallery has uninitialized memory disclosure. The Samsung ID is SVE-2018-13060 February 2019...

CVE-2019-20565: Improper Authentication

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. Attackers can change the USB configuration without authentication. The Samsung ID is SVE-2018-13300 September 2019...

CVE-2019-20558: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a Buffer Overflow in the Touch Screen Driver. The Samsung ID is SVE-2019-14990 October 2019...

PT-2020-10532

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 software Description An issue was discovered that allows attackers to control the effective address in EL2 due to RKP memory corruption. Recommendations For Samsung mobile devices with P9.0 software, at the...

CVE-2019-20532: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can access the Developer options without authentication. The Samsung ID is SVE-2019-15800 December 2019...

PT-2020-10545

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x and P9.0 devices Exynos and Qualcomm chipsets software Description A race condition causes a Use-After-Free issue. This issue affects Samsung mobile devices with O8.x and P9.0 devices, including both Exynos and...

CVE-2019-20584: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the HDCP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14850 August 2019...

CVE-2019-11341

On Samsung P(9.0) devices, the vulnerability enables a physically proximate attacker to start a TCP dump via the Service Mode feature (accessible after entering the *#9900# check code) without user knowledge. The OTP that protects this feature is generated locally, and the password creation logic...