CVEvulnerability
CVE-2019-20566
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-03-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
An issue was discovered on Samsung mobile devices with any (before September 2019 for SMP1300 Exynos modem chipsets) software. Attackers can trigger stack corruption in the Shannon modem via a crafted RP-Originator/Destination address. The Samsung ID is SVE-2019-14858 (September 2019).
Affected configurations
• samsung exynos smp1300
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://security.samsungmobile.com/securityUpdate.smsb Vendor Advisory
- https://security.samsungmobile.com/securityUpdate.smsb Vendor Advisory