CVE-2019-20610
First published: Tue Mar 24 2020(Updated: )
An issue was discovered on Samsung mobile devices with N(7.X) and O(8.X) (Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets) software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 (April 2019).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | =7.0 | |
| Google Android | =7.1.0 | |
| Google Android | =7.1.1 | |
| Google Android | =7.1.2 | |
| Google Android | =8.0 | |
| Google Android | =8.1 | |
| Samsung Exynos 7570 | ||
| Samsung Exynos 7870 | ||
| Samsung Exynos 7880 | ||
| Samsung Exynos 7885 | ||
| Samsung Exynos 8890 | ||
| Samsung Exynos 8895 | ||
| Samsung Exynos 9810 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-20610.
Which software versions are affected by this vulnerability?
This vulnerability affects Samsung mobile devices with N(7.X) and O(8.X) (Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets) software.
What is the severity level of CVE-2019-20610?
The severity level of CVE-2019-20610 is critical (8.1).
How does this vulnerability allow arbitrary TEE code execution?
This vulnerability is a double-fetch vulnerability in Trustlet that allows arbitrary TEE code execution.
How can I fix this vulnerability?
To fix this vulnerability, apply the security update provided by Samsung. More information can be found at the following reference: [https://security.samsungmobile.com/securityUpdate.smsb](https://security.samsungmobile.com/securityUpdate.smsb)
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- vendor/google
- canonical/google android
- version/google android/7.0
- version/google android/7.1.0
- version/google android/7.1.1
- version/google android/7.1.2
- version/google android/8.0
- version/google android/8.1
- vendor/samsung
- canonical/samsung exynos 7570
- canonical/samsung exynos 7870
- canonical/samsung exynos 7880
- canonical/samsung exynos 7885
- canonical/samsung exynos 8890
- canonical/samsung exynos 8895
- canonical/samsung exynos 9810