VULNERABILITY INTELLIGENCE

CVE-2019-20587

CVSS score9.8 CRITICAL
EPSS probability0.86%
CISA KEVNot currently listed
Published2020-03-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software. There is type confusion in the MLDAP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14867 (August 2019).

Weakness classification

  • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

Primary references