← Back

CVE-2019-19273

nvd nist
Published: Feb 4, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbitrary memory write operations. The Samsung ID is SVE-2019-16265.

Affected (3)

Google
1 product
Android
Samsung
1 product
Exynos 8895
Configuration A
2 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Google
Android
Version 8.0
Android
Version 9.0
Running on/withPlatform Versions
Samsung
Galaxy Note8
All versions
Samsung
Galaxy S8
All versions
Samsung
Galaxy S8 Plus
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Exynos 8895
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.