CVE-2019-20584: Critical severity android vulnerability

Published Mar 24, 2020

Updated

An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the HDCP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14850 (August 2019).

Affected Software

3 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Event History

Mar 24, 2020

CVE Published

via MITRE·06:55 PM

Data Sourced

via MITRE·06:55 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-20584?

CVE-2019-20584 has been classified as a critical vulnerability due to its potential for arbitrary code execution on affected Samsung mobile devices.

How do I fix CVE-2019-20584?

To fix CVE-2019-20584, users should update their Samsung mobile device to the latest software version available from the manufacturer.

Which Samsung devices are affected by CVE-2019-20584?

CVE-2019-20584 affects Samsung mobile devices running Android versions 8.0, 8.1, and 9.0 that utilize the TEEGRIS software.

What type of vulnerability is CVE-2019-20584?

CVE-2019-20584 is a type confusion vulnerability found in the HDCP Trustlet on Samsung mobile devices.

When was CVE-2019-20584 disclosed?

CVE-2019-20584 was disclosed in August 2019 as part of Samsung's security updates.