Lucene search
MWR Labs - Georgi Geshev and Robert MillerZDI-19-255HistoryMar 05, 2019 - 12:00 a.m.
(Pwn2Own) Samsung Galaxy S9 GameServiceReceiver Unsafe Updates Validation Remote Code Execution Vulnerability
2019-03-0500:00:00
MWR Labs - Georgi Geshev and Robert Miller
www.zerodayinitiative.com
27
0.048 Low
EPSS
Percentile
92.8%
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the GameServiceReceiver update mechanism. An attacker can leverage this vulnerability to execute code in the context of the current process.
Related
nvd
nvd
CVE-2019-6742
2019-06-03 19:29:02
cve
cve
CVE-2019-6742
2019-06-03 19:29:02
prion
prion
Design/Logic Flaw
2019-06-03 19:29:00
cvelist
cvelist
CVE-2019-6742
2019-06-03 18:15:47