CVE-2020-10839: Medium severity Google Android vulnerability

Published Mar 24, 2020

Updated

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via a SIM card. The Samsung ID is SVE-2019-16193 (February 2020).

Affected Software

4 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Event History

Mar 24, 2020

CVE Published

via MITRE·05:21 PM

Data Sourced

via MITRE·05:21 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-10839?

CVE-2020-10839 is considered a high severity vulnerability due to the potential unauthorized bypass of Factory Reset Protection.

How do I fix CVE-2020-10839?

To fix CVE-2020-10839, ensure your Samsung mobile device is updated to the latest security patch provided by the manufacturer.

What devices are affected by CVE-2020-10839?

CVE-2020-10839 affects Samsung mobile devices running Android versions 8.0, 8.1, 9.0, and 10.0.

What is Factory Reset Protection in relation to CVE-2020-10839?

Factory Reset Protection is a security feature that prevents unauthorized users from accessing a device after a factory reset, which can be bypassed in CVE-2020-10839.

Can CVE-2020-10839 be exploited remotely?

CVE-2020-10839 requires physical access to the device, as it involves the use of a SIM card to exploit the vulnerability.