CVE-2019-15439: High severity samsung xcover 4 firmware vulnerability
The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltedo/xcover4lte:8.1.0/M1AJQ/G390YDXU2BSA1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15439?
CVE-2019-15439 is considered a moderate vulnerability due to its potential for unauthorized access via a pre-installed app.
How do I fix CVE-2019-15439?
To mitigate CVE-2019-15439, uninstall the vulnerable pre-installed app or update the device firmware to a patched version.
What devices are affected by CVE-2019-15439?
CVE-2019-15439 affects the Samsung XCover4 Android device with the specified firmware version.
What are the risks associated with CVE-2019-15439?
The risks of CVE-2019-15439 include potential unauthorized access to sensitive information through the compromised pre-installed app.
Is there a patch available for CVE-2019-15439?
Yes, Samsung has released firmware updates that address the vulnerabilities related to CVE-2019-15439.