PT-2020-10586

CVE-2019-20610

·

Published

2020-03-24

·

Updated

2020-08-24

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.X) and O(8.X) software
Description A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution on Samsung mobile devices with Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets.
Recommendations For Samsung mobile devices with N(7.X) and O(8.X) software, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Related identifiers
CVE-2019-20610
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com