CVE-2019-20589

EPSS 0.2%
Veröffentlicht 24.03.2020 19:15:20
Zuletzt bearbeitet 21.11.2024 04:38:49
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the SKPM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14892 (August 2019).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version8.0

Google ≫ Android Version8.1

Google ≫ Android Version9.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.384

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

https://security.samsungmobile.com/securityUpdate.smsb

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-20589

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-20589

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-20589

EUVD