CVE-2019-20567: Critical severity android vulnerability

Published Mar 24, 2020

Updated

An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. A upparm heap overflow leads to code execution in the bootloader. The Samsung ID is SVE-2019-14993 (September 2019).

Affected Software

7 affected components

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Event History

Mar 24, 2020

CVE Published

via MITRE·06:34 PM

Data Sourced

via MITRE·06:34 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-20567?

CVE-2019-20567 has been classified with a high severity rating due to its potential for code execution in the bootloader.

How do I fix CVE-2019-20567?

To fix CVE-2019-20567, users should update their Samsung devices to the latest software version provided in security patches.

Which devices are affected by CVE-2019-20567?

CVE-2019-20567 affects Samsung mobile devices running Android Nougat, Oreo, and Pie on Exynos chipsets.

What is the impact of CVE-2019-20567?

The impact of CVE-2019-20567 includes the possibility of malicious code execution that can compromise the device's bootloader.

When was CVE-2019-20567 disclosed?

CVE-2019-20567 was disclosed in September 2019 as part of a security update by Samsung.