7.8

CVE-2019-19273

Exploit
On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbitrary memory write operations. The Samsung ID is SVE-2019-16265.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Android Version 8.0
   Samsung ≫ Galaxy Note8 Version -
   Samsung ≫ Galaxy S8 Version -
   Samsung ≫ Galaxy S8 Plus Version -
Google ≫ Android Version 9.0
   Samsung ≫ Galaxy Note8 Version -
   Samsung ≫ Galaxy S8 Version -
   Samsung ≫ Galaxy S8 Plus Version -
Samsung ≫ Exynos 8895 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.128
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://security.samsungmobile.com/securityUpdate.smsb
Vendor Advisory
https://census-labs.com/news/2020/10/08/samsung-hypervisor-rkp-arbitrary-zero-write/
Third Party Advisory
Exploit