CVE-2019-20537: Critical severity android vulnerability

Published Mar 24, 2020

Updated

An issue was discovered on Samsung mobile devices with P(9.0) (TEEGRIS and Qualcomm chipsets). There is arbitrary memory overwrite in the SEM Trustlet, leading to arbitrary code execution. The Samsung IDs are SVE-2019-14651, SVE-2019-14666 (November 2019).

Affected Software

1 affected component

Google Android=9.0

Event History

Mar 24, 2020

CVE Published

via MITRE·05:47 PM

Data Sourced

via MITRE·05:47 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-20537?

CVE-2019-20537 has a high severity due to its potential for arbitrary code execution on affected Samsung devices.

How do I fix CVE-2019-20537?

To fix CVE-2019-20537, update your Samsung mobile device to the latest security patch released by Samsung.

Which devices are affected by CVE-2019-20537?

CVE-2019-20537 affects Samsung mobile devices running Android 9.0 on TEEGRIS and Qualcomm chipsets.

What are the consequences of exploiting CVE-2019-20537?

Exploiting CVE-2019-20537 can lead to arbitrary memory overwrite and malicious code execution on the device.

When was CVE-2019-20537 reported?

CVE-2019-20537 was reported in November 2019, with associated Samsung IDs SVE-2019-14651 and SVE-2019-14666.