PT-2020-8733
CVE-2018-21089
·
Published
2020-04-08
·
Updated
2020-04-09
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Samsung mobile devices with N(7.x) (MT6755/MT6757 Mediatek models) software
Description
An issue was discovered in the bootloader of Samsung mobile devices, which has an integer overflow. This leads to arbitrary code execution via the
download offset control.Recommendations
For Samsung mobile devices with N(7.x) (MT6755/MT6757 Mediatek models) software, consider restricting access to the bootloader until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾