CVE-2019-20590

CRITICAL

Android - Integer Underflow in Secure Storage Trustlet

Title source: llm
STIX 2.1

Description

An issue was discovered on Samsung mobile devices with O(8.x) (Qualcomm chipsets) software. There is an integer underflow in the Secure Storage Trustlet. The Samsung ID is SVE-2019-13952 (July 2019).

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://security.samsungmobile.com/securityUpdate.smsb

Scores

CVSS v3 9.8
EPSS 0.0044
EPSS Percentile 35.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-191
Status published
Products (2)
google/android 8.0
google/android 8.1
Published Mar 24, 2020
Tracked Since Feb 18, 2026