CVE-2019-6742criticalCWE-358

CVE-2019-6742: critical vulnerability in Samsung Galaxy S9

Published · Updated

Follow this CVE+ Monitor Galaxy S9

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 5.9%
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to 1.4.20.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the GameServiceReceiver update mechanism. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7477.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Samsung · Galaxy S9
Related CVEs — Samsung Galaxy S9

In the same product, most dangerous first.

CVE-2019-6740CRITICALCVE-2019-6740EPSS 3.3%CVE-2019-6741MEDIUMCVE-2019-6741EPSS 3.2%