5559 matches found
CVE-2019-20598
The CVE-2019-20598 entry concerns Samsung mobile devices running O(8.x) software where Bixby can leak the keyboard’s learned words and clipboard contents through the lock screen. The vulnerability is documented with Samsung IDs SVE-2018-12896 and SVE-2018-12897. Connected records (e.g., Red Hat C...
CVE-2019-20596
Samsung mobile devices running N(7.x) and O(8.x) software (Exynos chipsets) are affected by CVE-2019-20596 due to an information disclosure in the GateKeeper Trustlet. The data shows a vulnerability in a Trustlet component, leading to partial confidentiality impact with high severity in CVSS 3.1 ...
CVE-2019-20594
Affected software/hardware: Samsung mobile devices with O(8.1) and P(9.0) on Exynos chipsets. Vulnerability: a heap overflow in the bootloader. Root cause: heap overflow in bootloader code (unspecified module) leading to potential impact on device integrity. Impact: Partial to high in CVSS terms ...
CVE-2019-20592
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Story Video Editor Content Provider. The Samsung ID is SVE-2019-14062 July 2019...
CVE-2019-20591
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Gear VR Service Content Provider. The Samsung ID is SVE-2019-14058 July 2019...
CVE-2019-20590
CVE-2019-20590 affects Samsung mobile devices running O(8.x) software on Qualcomm chipsets, with an integer underflow in the Secure Storage Trustlet (Samsung ID SVE-2019-13952). Connected sources (Red Hat, NVD, CVE listing) confirm the vulnerable component and root cause as an underflow in Secure...
CVE-2019-20587
CVE-2019-20587 corresponds to a type-confusion vulnerability in Samsung mobile devices running O(8.1) and P(9.0) with TEEGRIS. The issue is in the MLDAP Trustlet, enabling arbitrary code execution due to a type confusion flaw. Samsung ID: SVE-2019-14867 (August 2019). Connected sources (Red Hat, ...
CVE-2019-20586
An issue was discovered on Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software. There is type confusion in the FINGERPRINT Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14864 August 2019...
CVE-2019-20586
CVE-2019-20586 affects Samsung mobile devices running O(8.1) and P(9.0) with TEEGRIS. Root cause is a type confusion in the FINGERPRINT Trustlet, enabling arbitrary code execution. Exploitation details are not provided in the available documents, and no public patch/version fix is specified; one ...
CVE-2019-20585
The CVE-2019-20585 issue affects Samsung mobile devices running O(8.x) and P(9.0) with TEEGRIS. Root cause: type confusion in the SEC_FR Trustlet that permits arbitrary code execution. Affected component: SEC_FR Trustlet on Samsung devices; Samsung ID SVE-2019-14851. No concrete remediation or ex...
CVE-2019-20584
Samsung mobile devices running O(8.x) and P(9.0) with TEEGRIS are affected by a type-confusion in the HDCP Trustlet, enabling arbitrary code execution. Root cause: type confusion within the HDCP Trustlet component. Impact, as reflected in CVE records, is high/critical (CVE-2019-20584) with potent...
CVE-2019-20573
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the RCS Content Provider. The Samsung IDs are SVE-2019-14059, SVE-2019-14685 August 2019...
CVE-2019-20572
CVE-2019-20572 describes a buffer overflow in the load_kernel path on Samsung mobile devices with Exynos chips running O(8.1) and P(9.0). The issue is triggered by untrusted data and is documented across multiple feeds (NVD entry and Red Hat/CVE references) under the Samsung ID SVE-2019-14939. Th...
CVE-2019-20571
The CVE-2019-20571 entry describes a type confusion vulnerability in the WVDRM Trustlet on Samsung mobile devices running O(8.x) with TEEGRIS, allowing arbitrary code execution. Affected component: WVDRM Trustlet; root cause: type confusion. Impact: arbitrary code execution with high severity (pe...
CVE-2019-20567
The CVE-2019-20567 issue affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) on Exynos chipsets. The root cause is a heap overflow in up_parm, which leads to code execution in the bootloader. Documented impact is high/severe (bootloader code execution possible). Exploitation details...
CVE-2019-20563
An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. The SECFR trustlet has an out of bounds write. The Samsung ID is SVE-2019-15272 October 2019...
CVE-2019-20563
The CVE-2019-20563 entry concerns Samsung mobile devices running O(8.x) and P(9.0) with TEEGRIS, where the SEC_FR trustlet has an out-of-bounds write. Affected component: SEC_FR trustlet; root cause: out-of-bounds write vulnerability in trustlet code. Documented impact indicates high severity (CV...
CVE-2019-20554
An issue was discovered on Samsung mobile devices with O8.x software. Attackers can bypass Factory Reset Protection FRP via an external keyboard. The Samsung ID is SVE-2019-15164 October 2019...
CVE-2019-20551
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Attackers can bypass Factory Reset Protection FRP via a Class 0 Type Message. The Samsung ID is SVE-2019-14941 October 2019...
