CVE-2019-20544: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos chipsets software. There is an out-of-bounds write in the ICCC Trustlet. The Samsung ID is SVE-2019-15274 November 2019...

PT-2020-10513

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 Description An issue was discovered that allows arbitrary memory overwrite in the SEM Trustlet, leading to arbitrary code execution. Recommendations For Samsung mobile devices with P9.0, at the moment, there is...

PT-2020-10559

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x through P9.0 Description A stack overflow in the HDCP Trustlet causes arbitrary code execution. Recommendations For Samsung mobile devices with N7.x through P9.0, update the software to a version that fixes the...

CVE-2019-20610: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered on Samsung mobile devices with N7.X and O8.X Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 April 2019...

PT-2020-12360

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 and Q10.0 software Description An issue was discovered that allows a stack overflow and arbitrary code execution due to the Esecomm Trustlet. Recommendations For Samsung mobile devices with P9.0 software, updat...

PT-2020-10586

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.X and O8.X software Description A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution on Samsung mobile devices with Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets...

PT-2020-12359

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x Samsung mobile devices with P9.0 Samsung mobile devices with Q10.0 Description An issue was discovered on Samsung mobile devices that allows read and write operations on arbitrary memory locations due to a...

CVE-2019-20607: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets software. A heap overflow in the keymaster Trustlet allows attackers to write to TEE memory, and achieve arbitrary code execution. The Samsung ...

CVE-2019-20588: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SEM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14891 August 2019...

CVE-2019-20560: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. The BIOSUB Trustlet has an out of bounds write. The Samsung ID is SVE-2019-15261 October 2019...

CVE-2019-20581: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. A stack overflow in the HDCP Trustlet causes arbitrary code execution. The Samsung ID is SVE-2019-14665 August 2019...

CVE-2019-20585: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SECFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14851 August 2019...

CVE-2019-20583: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the EXTFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14847 August 2019...

CVE-2019-20537: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with P9.0 TEEGRIS and Qualcomm chipsets. There is arbitrary memory overwrite in the SEM Trustlet, leading to arbitrary code execution. The Samsung IDs are SVE-2019-14651, SVE-2019-14666 November 2019...

CVE-2019-20562: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with P9.0 with TEEGRIS software. There is a buffer overflow in the BIOSUB Trustlet. The Samsung ID is SVE-2019-15264 October 2019...

PT-2020-10579

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x software Samsung mobile devices with O8.0 software Samsung mobile devices with P9.0 software Description An issue was discovered on Samsung mobile devices, where the ESECOMM Trustlet has a NULL pointer...

CVE-2019-20596: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with N7.x and O8.x Exynos chipsets software. There is information disclosure in the GateKeeper Trustlet. The Samsung ID is SVE-2019-13958 June 2019...

CVE-2019-20584: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the HDCP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14850 August 2019...

PT-2020-10561

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x and P9.0 with TEEGRIS software Description The issue is related to type confusion in the EXT FR Trustlet, which can lead to arbitrary code execution. Recommendations For Samsung mobile devices with O8.x and P9....

PT-2019-6297

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software and Qualcomm chipsets SDM660, MSM8998, SDM845, SM8150 Description The issue is caused by an integer underflow in the Secure Storage Trustlet, which may allow a remote attacker to impact the...