7.8

CVE-2019-19273

Exploit

On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbitrary memory write operations. The Samsung ID is SVE-2019-16265.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Android Version8.0
   Samsung ≫ Galaxy Note8 Version-
   Samsung ≫ Galaxy S8 Version-
   Samsung ≫ Galaxy S8 Plus Version-
Google ≫ Android Version9.0
   Samsung ≫ Galaxy Note8 Version-
   Samsung ≫ Galaxy S8 Version-
   Samsung ≫ Galaxy S8 Plus Version-
Samsung ≫ Exynos 8895 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.01% 0.011
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.