CVE-2019-6742 CRITICAL

CVE-2019-6742

Vendor Samsung

Product Galaxy S9

Weakness CWE-358

Published June 3, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

10.0/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to 1.4.20.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the GameServiceReceiver update mechanism. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7477.

Key dates

02Disclosure timeline

June 3, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-6742 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/358.html

Related vulnerabilities

CVE-2019-6742

01Description

02Disclosure timeline

03References

04Related CVE