CVE-2019-20556: Critical severity android vulnerability
An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150FUSION, exynos7885, exynos9610, and exynos9820 chipsets) software. RKP memory corruption allows attackers to control the effective address in EL2. The Samsung ID is SVE-2019-15221 (October 2019).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-20556?
CVE-2019-20556 is an issue discovered on Samsung mobile devices with P(9.0) software, which allows attackers to control the effective address in EL2.
Which Samsung mobile devices are affected by CVE-2019-20556?
Samsung mobile devices with P(9.0) software, specifically those with SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets, are affected by CVE-2019-20556.
What is the severity rating of CVE-2019-20556?
CVE-2019-20556 has a severity rating of 9.8 (Critical).
How can attackers exploit CVE-2019-20556?
Attackers can exploit CVE-2019-20556 by causing RKP memory corruption to control the effective address in EL2.
Is there a fix available for CVE-2019-20556?
To fix CVE-2019-20556, it is recommended to apply the security patch provided by Samsung. Please refer to the Samsung security updates page for more information.