CVE-2020-10841

CVE-2020-10841 affects Samsung mobile devices with P(9.0)/Q(10.0) on Exynos 9610; root cause is an arbitrary kfree in the vipx and vertex drivers. Red Hat/NVD entries corroborate a kernel-free issue with potential high impact (CVE notes partial/confidentiality/availability risks, CVSSv3.1 base 7....

CVE-2020-10840

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is a kernel pointer leak in the vipx driver. The Samsung ID is SVE-2019-16293 February 2020...

CVE-2020-10840

Summary: CVE-2020-10840 describes a kernel pointer leak in the vipx driver affecting Samsung mobile devices with Exynos 9610 (P9.0 and Q10.0). The Samsung internal ID is SVE-2019-16293 (February 2020). The Red Hat entry reiterates the same description. What is affected: Samsung mobile devices wit...

CVE-2020-10836

CVE-2020-10836 affects Samsung mobile devices with Exynos (O(8.x), P(9.0), Q(10.0)). The Widevine Trustlet permits read/write access to arbitrary memory, indicating a memory-safety/Trustlet isolation flaw. CVSSv3.1 base score 9.8 (CRITICAL); access is network-based with no authentication required...

CVE-2020-10835

An issue was discovered on Samsung mobile devices with any before February 2020 for Exynos modem chipsets software. There is a buffer overflow in baseband CP message decoding. The Samsung IDs are SVE-2019-15816 and SVE-2019-15817 February 2020...

CVE-2020-10832

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. Kernel Wi-Fi drivers allow out-of-bounds Read or Write operations e.g., a buffer overflow. The Samsung IDs are SVE-2019-16125, SVE-2019-16134, SVE-2019-16158, SVE-2019-16159, SVE-2019-16319, SVE-2019-16320,...

CVE-2020-10832

The CVE-2020-10832 entry describes a vulnerability in Samsung mobile devices with P(9.0) Exynos chipsets where Kernel Wi-Fi drivers allow out-of-bounds Read/Write operations (buffer overflow). This affects the kernel Wi-Fi subsystem and is tied to several Samsung internal IDs (SVE-2019-16125, 161...

PT-2020-10543

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with software before September 2019 for SMP1300 Exynos modem chipsets Description An issue was discovered that allows attackers to trigger stack corruption in the Shannon modem via a crafted RP-Originator/Destination...

PT-2020-10516

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x software Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Description A buffer over-read issue in the core touch screen driver of Samsung mobile devices with Exynos chipsets m...

PT-2020-10534

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x software Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Description A Buffer Overflow issue was discovered in the Touch Screen Driver of Samsung mobile devices equipped with...

PT-2020-10598

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x software Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Description An issue was discovered on Samsung mobile devices, specifically those with Exynos chipsets, where there i...

CVE-2020-10836: Out-of-bounds Read

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos chipsets software. The Widevine Trustlet allows read and write operations on arbitrary memory locations. The Samsung ID is SVE-2019-15873 February 2020...

CVE-2019-20625: Insertion of Sensitive Information into Log File

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

CVE-2019-20605: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. A heap overflow occurs for baseband in the Shannon modem. The Samsung ID is SVE-2019-14071 May 2019...

PT-2020-10587

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x Samsung mobile devices with O8.x Samsung mobile devices with Go8.1 Samsung mobile devices with P9.0 Samsung mobile devices with Go9.0 Description A baseband stack overflow issue leads to arbitrary code executio...

CVE-2019-20568: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered on Samsung mobile devices with O8.x and P9.0 devices Exynos and Qualcomm chipsets software. A race condition causes a Use-After-Free. The Samsung ID is SVE-2019-15067 September 2019...

CVE-2020-10840: Missing Release of Memory after Effective Lifetime

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is a kernel pointer leak in the vipx driver. The Samsung ID is SVE-2019-16293 February 2020...

PT-2020-12363

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software Description A kernel pointer leak was discovered in the vipx driver. Recommendations For Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software, at the...

PT-2020-12373

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x Samsung mobile devices with P9.0 Samsung mobile devices with Q10.0 Description A buffer overflow issue in the secure bootloader of Samsung mobile devices with Exynos chipsets allows for arbitrary code execution...

PT-2020-10555

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 Exynos 9820 chipsets software Description A buffer overflow issue occurs when loading the UH Partition during Secure Boot, potentially affecting Samsung mobile devices. Recommendations For Samsung mobile device...