CVE-2019-20588: Critical severity android vulnerability

Published Mar 24, 2020

Updated

An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the SEM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14891 (August 2019).

Affected Software

3 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Event History

Mar 24, 2020

CVE Published

via MITRE·06:59 PM

Data Sourced

via MITRE·06:59 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-20588?

CVE-2019-20588 is considered critical due to its potential for arbitrary code execution on affected Samsung mobile devices.

How do I fix CVE-2019-20588?

To remediate CVE-2019-20588, users should update their affected Samsung mobile devices to the latest security patches provided by Samsung.

Which devices are affected by CVE-2019-20588?

CVE-2019-20588 affects Samsung mobile devices running Android versions 8.0, 8.1, and 9.0 with TEEGRIS software.

What are the consequences of CVE-2019-20588 exploitation?

Exploitation of CVE-2019-20588 may allow an attacker to execute arbitrary code, potentially compromising the device's integrity and data.

When was CVE-2019-20588 disclosed?

CVE-2019-20588 was disclosed in August 2019, alongside its Samsung ID SVE-2019-14891.