CVE-2020-11604

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software

published April 8, 2020

CVSS
—
EPSS
0%
Percentile
40.1
In the wild
Unconfirmed
What it is

⚠️ A puzzling out-of-bounds read lurks in some Samsung devices. This is like having a package that accidentally lets you peek inside without permission! 📦 Think of it like a hotel room with a sliding door that isn't properly secured, allowing guests to snoop around just a bit too easily. It might not be a full-blown break-in, but it could reveal some sensitive information! If exploited, this vulnerability could allow a malicious actor to read sensitive data from the device memory, potentially compromising user information. While there’s no known exploitation yet, the mere possibility of an unwanted peek into private data is concerning.

Put simply

Think of it like a hotel room with a sliding door that isn't properly secured, allowing guests to snoop around just a bit too easily. It might not be a full-blown break-in, but it could reveal some sensitive information! This vulnerability resides in the MLDAP Trustlet of Samsung mobile devices running P(9.0) and Q(10.0), enabling unauthorized access to out-of-bounds memory locations, thus leaking data.

What to do

If exploited, this vulnerability could allow a malicious actor to read sensitive data from the device memory, potentially compromising user information. While there’s no known exploitation yet, the mere possibility of an unwanted peek into private data is concerning. To mitigate this risk, ensure your Samsung devices are updated with the latest software patches. Regularly check for updates from Samsung and consider reviewing your device's permissions. You've got this! Stay proactive and keep your devices secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00475 · 40.1th percentile
Published
2020-04-08T15:27Z
EPSS history
Timeline
  • 08 APR 15:27Z
    An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software
    cvelistv5