CVE-2019-20587: Critical severity android vulnerability
Published Mar 24, 2020
·Updated
An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software. There is type confusion in the MLDAP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14867 (August 2019).
Affected Software
2 affected components
Google Android=8.1
Google Android=9.0
Event History
Mar 24, 2020
CVE Published
via MITRE·06:58 PM
Data Sourced
via MITRE·06:58 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20587?
CVE-2019-20587 is considered critical due to the potential for arbitrary code execution.
2
What devices are affected by CVE-2019-20587?
CVE-2019-20587 affects Samsung mobile devices running Google Android versions 8.1 and 9.0.
3
How do I fix CVE-2019-20587?
To fix CVE-2019-20587, users should update their Samsung devices to the latest security patch provided by Samsung.
4
What causes CVE-2019-20587?
CVE-2019-20587 is caused by type confusion in the MLDAP Trustlet within the affected Samsung devices.
5
When was CVE-2019-20587 disclosed?
CVE-2019-20587 was disclosed in August 2019, alongside Samsung ID SVE-2019-14867.