An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets) software. A heap overflow in the keymaster Trustlet allows attackers to write to TEE memory, and achieve arbitrary code execution. The Samsung ID is SVE-2019-14126 (May 2019).
References
Link | Resource |
---|---|
https://security.samsungmobile.com/securityUpdate.smsb | Vendor Advisory |
https://security.samsungmobile.com/securityUpdate.smsb | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 04:38
Type | Values Removed | Values Added |
---|---|---|
References | () https://security.samsungmobile.com/securityUpdate.smsbĀ - Vendor Advisory |
Information
Published : 2020-03-24 20:15
Updated : 2024-11-21 04:38
NVD link : CVE-2019-20607
Mitre link : CVE-2019-20607
CVE.ORG link : CVE-2019-20607
JSON object : View
Products Affected
samsung
- exynos_8895
- exynos_7870
- exynos_7420
- exynos_8890
qualcomm
- msm8998
- msm8996
- android
CWE
CWE-787
Out-of-bounds Write