CVEvulnerability
CVE-2019-19273
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-02-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbitrary memory write operations. The Samsung ID is SVE-2019-16265.
Affected configurations
• google android 8.0
• google android 9.0
• samsung exynos 8895
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://census-labs.com/news/2020/10/08/samsung-hypervisor-rkp-arbitrary-zero-write/ Exploit, Third Party Advisory
- https://security.samsungmobile.com/securityUpdate.smsb Vendor Advisory
- https://census-labs.com/news/2020/10/08/samsung-hypervisor-rkp-arbitrary-zero-write/ Exploit, Third Party Advisory
- https://security.samsungmobile.com/securityUpdate.smsb Vendor Advisory