CVE-2020-11603 | Vulnetix

CVE-2020-11603 PUBLISHED CVSS 9.800000190734863 CRITICAL

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software. Type confusion in the MLDAP Trustlet allows arbitrary code execution. The Samsung ID is SVE-2020-16599 (April 2020).

EPSS 0.75% · 53.5th percentile

Risk Scores

CVSS 3.1

9.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.75%

53.5th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	*
google	android	10.0, 9.0

Timeline

Apr 8, 2020 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 25, 2021 EPSS Score
Dec 29, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Mar 2, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 4, 2022 EPSS Score
Sep 8, 2022 EPSS Score
Nov 10, 2022 EPSS Score

References

https://security.samsungmobile.com/securityUpdate.smsb url
https://www.tuttoandroid.net/samsung/samsung-patch-sicurezza-aprile-2020-798658/ url
https://nvd.nist.gov/vuln/detail/CVE-2020-11603 advisory
https://www.tuttoandroid.net/samsung/samsung-patch-sicurezza-aprile-2020-798658 url

Open in Interactive Console →