Vulnerability CVE-2019-12087


Published: 2019-05-13   Modified: 2019-05-14

Description:
** DISPUTED ** Samsung S9+, S10, and XCover 4 P(9.0) devices can become temporarily inoperable because of an unprotected intent in the ContainerAgent application. For example, the victim becomes stuck in a launcher with their Secure Folder locked. NOTE: the researcher mentions "the Samsung Security Team considered this issue as no/little security impact."

Type:

CWE-399

(Resource Management Errors)

CVSS2 => (AV:L/AC:L/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.9/10
6.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Samsung -> S10 firmware 
Samsung -> S9+ firmware 
Samsung -> Xcover 4 firmware 

 References:
https://github.com/fs0c131y/SamsungLocker

Copyright 2024, cxsecurity.com

 

Back to Top