CVE-2019-20585: Critical severity android vulnerability

Published Mar 24, 2020

Updated

An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the SECFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14851 (August 2019).

Affected Software

3 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Event History

Mar 24, 2020

CVE Published

via MITRE·06:57 PM

Data Sourced

via MITRE·06:57 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-20585?

CVE-2019-20585 is classified as a critical vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2019-20585?

To fix CVE-2019-20585, users should update their Samsung mobile devices to the latest security patches provided by the manufacturer.

What types of devices are affected by CVE-2019-20585?

CVE-2019-20585 affects Samsung mobile devices running Android versions 8.0, 8.1, and 9.0 that utilize TEEGRIS software.

What is the source of CVE-2019-20585?

The vulnerability CVE-2019-20585 originates from a type confusion issue in the SEC_FR Trustlet on affected Samsung devices.

Is there a known exploit for CVE-2019-20585?

While there are no public exploits specifically documented for CVE-2019-20585, its classification indicates a high risk of exploitation.