CVE-2024-20820

Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read.

Affected

Samsung Mobile · Samsung Mobile Devices

CVSS v3.1 NVD

7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CVSS v3.1 SAMSUNG

4.4 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

0.20% chance of exploitation in the next 30 days, 10th percentile

Published

2024-02-06

Updated

2024-08-01

Proof-of-concept exploits (1)

• quarkslab/samsung-bootchain-poc95★ · 2024-09-09

Security advisories

• https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02

References

• CVE Record
• NVD entry

Related

• CVE-2020-0069
• CVE-2024-20021
• CVE-2024-20832
• CVE-2024-20865