CVE-2019-19273: High severity android vulnerability

Published Feb 4, 2020

Updated

On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbitrary memory write operations. The Samsung ID is SVE-2019-16265.

Affected Software

6 affected components

Google Android=8.0

Google Android=9.0

Samsung Galaxy Note8

Samsung Galaxy S8

Samsung Galaxy S8 plus

Samsung Exynos 8895

Event History

Feb 4, 2020

CVE Published

via MITRE·03:46 PM

Data Sourced

via MITRE·03:46 PM

Description

Frequently Asked Questions

What is CVE-2019-19273?

CVE-2019-19273 is a vulnerability that allows arbitrary memory write operations on Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset.

How does CVE-2019-19273 affect Samsung mobile devices?

CVE-2019-19273 affects Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, allowing arbitrary memory write operations.

What is the severity level of CVE-2019-19273?

CVE-2019-19273 has a severity rating of 7.8 (High).

How can I fix CVE-2019-19273?

To fix CVE-2019-19273, Samsung mobile device users should update their software to the latest version available.

Where can I find more information about CVE-2019-19273?

More information about CVE-2019-19273 can be found on the Census Labs and Samsung Mobile Security websites.