CVE-2019-20566

An issue was discovered on Samsung mobile devices with any (before September 2019 for SMP1300 Exynos modem chipsets) software

published March 24, 2020

CVSS
—
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

⚠️ A crafty address can leave Samsung devices vulnerable! Attackers can exploit a flaw in the Shannon modem and twist the stack like a pretzel. 🔥 Imagine the Shannon modem is like a post office that gets confused by badly addressed packages, incorrectly sending them to the wrong destination. This mix-up can lead to chaos inside the system, just like misdelivered mail can disrupt communication. If exploited, this vulnerability could lead to stack corruption, potentially allowing attackers to wreak havoc on device functions. While the impact is currently unknown, any stack corruption could lead to unexpected behavior or crashes, leaving users in a lurch.

Put simply

Imagine the Shannon modem is like a post office that gets confused by badly addressed packages, incorrectly sending them to the wrong destination. This mix-up can lead to chaos inside the system, just like misdelivered mail can disrupt communication. This vulnerability arises from an issue in Samsung mobile devices' Shannon modem, specifically before September 2019 versions. Attackers can trigger stack corruption using crafted RP-Originator/Destination addresses, leading to unpredictable results.

What to do

If exploited, this vulnerability could lead to stack corruption, potentially allowing attackers to wreak havoc on device functions. While the impact is currently unknown, any stack corruption could lead to unexpected behavior or crashes, leaving users in a lurch. To mitigate this vulnerability, ensure that your device is updated with the latest software from Samsung, particularly those released after September 2019. Regularly check for updates and apply them as soon as they are available to keep your device secure. You've got this! Stay proactive with your updates, and you'll keep your device safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01469 · 73.5th percentile
Published
2020-03-24T18:33Z
EPSS history
Timeline
  • 24 MAR 18:33Z
    An issue was discovered on Samsung mobile devices with any (before September 2019 for SMP1300 Exynos modem chipsets) software
    cvelistv5