Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos chipsets software. The Widevine Trustlet allows read and write operations on arbitrary memory locations. The Samsung ID is SVE-2019-15873 February 2020...

Stack overflow

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 with TEEGRIS software. The Esecomm Trustlet allows a stack overflow and arbitrary code execution. The Samsung ID is SVE-2019-15984 February 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos7885, Exynos8895, and Exynos9810 chipsets software. The Gatekeeper trustlet allows a brute-force attack on the screen lock password. The Samsung ID is SVE-2019-14575 January 2020...

Out-of-bounds

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos chipsets software. There is an out-of-bounds write in the ICCC Trustlet. The Samsung ID is SVE-2019-15274 November 2019...

Buffer overflow

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos chipsets software. A buffer overflow in the HDCP Trustlet affects secure TEEGRIS memory. The Samsung ID is SVE-2019-15283 November 2019...

Code injection

An issue was discovered on Samsung mobile devices with P9.0 TEEGRIS and Qualcomm chipsets. There is arbitrary memory overwrite in the SEM Trustlet, leading to arbitrary code execution. The Samsung IDs are SVE-2019-14651, SVE-2019-14666 November 2019...

CVE-2019-20545

Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) are affected by CVE-2019-20545 due to a buffer overflow in the HDCP Trustlet that contaminates secure TEEGRIS memory. The issue is tracked as Samsung SVE-2019-15283 (November 2019). Impact is described as high/critical with potential...

CVE-2019-20545

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos chipsets software. A buffer overflow in the HDCP Trustlet affects secure TEEGRIS memory. The Samsung ID is SVE-2019-15283 November 2019...

CVE-2019-20544

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos chipsets software. There is an out-of-bounds write in the ICCC Trustlet. The Samsung ID is SVE-2019-15274 November 2019...

CVE-2020-10849

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos7885, Exynos8895, and Exynos9810 chipsets software. The Gatekeeper trustlet allows a brute-force attack on the screen lock password. The Samsung ID is SVE-2019-14575 January 2020...

CVE-2020-10836

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos chipsets software. The Widevine Trustlet allows read and write operations on arbitrary memory locations. The Samsung ID is SVE-2019-15873 February 2020...

CVE-2020-10836

CVE-2020-10836 affects Samsung mobile devices with Exynos (O(8.x), P(9.0), Q(10.0)). The Widevine Trustlet permits read/write access to arbitrary memory, indicating a memory-safety/Trustlet isolation flaw. CVSSv3.1 base score 9.8 (CRITICAL); access is network-based with no authentication required...

PT-2020-10564 · Samsung · Teegris +1

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software Description: The issue is related to type confusion in the FINGERPRINT Trustlet, which can lead to arbitrary code execution. Recommendations: For Samsung mobile devices with O8.1...

CVE-2020-10837: Improper Input Validation

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 with TEEGRIS software. The Esecomm Trustlet allows a stack overflow and arbitrary code execution. The Samsung ID is SVE-2019-15984 February 2020...

CVE-2020-10836: Out-of-bounds Read

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos chipsets software. The Widevine Trustlet allows read and write operations on arbitrary memory locations. The Samsung ID is SVE-2019-15873 February 2020...

CVE-2020-10849: Improper Restriction of Excessive Authentication Attempts

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos7885, Exynos8895, and Exynos9810 chipsets software. The Gatekeeper trustlet allows a brute-force attack on the screen lock password. The Samsung ID is SVE-2019-14575 January 2020...

CVE-2019-20603: NULL Pointer Dereference

An issue was discovered on Samsung mobile devices with N7.x, O8.0, and P9.0 Qualcomm chipsets software. The ESECOMM Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13950 May 2019...

CVE-2019-20602: NULL Pointer Dereference

An issue was discovered on Samsung mobile devices with N7.x, O8.0, and P9.0 Qualcomm chipsets software. The Authnr Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13949 May 2019...

CVE-2019-20587: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software. There is type confusion in the MLDAP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14867 August 2019...

CVE-2019-20586: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software. There is type confusion in the FINGERPRINT Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14864 August 2019...