VDB

CVE-2019-20537

CVE-2019-20537 PUBLISHED CVSS 9.800000190734863 CRITICAL

An issue was discovered on Samsung mobile devices with P(9.0) (TEEGRIS and Qualcomm chipsets). There is arbitrary memory overwrite in the SEM Trustlet, leading to arbitrary code execution. The Samsung IDs are SVE-2019-14651, SVE-2019-14666 (November 2019).

EPSS 0.83% · 56.0th percentile

Risk Scores

CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.83%
56.0th percentile

Affected Products

VendorProductVersions
googleandroid9.0
n/an/an/a

Timeline

  • Mar 24, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 2, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • May 24, 2022 CVE Updated
  • Sep 8, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›