SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-20579

Gallery allows attackers to enable Location information sharing from the lock screen.

LOW 2.4EPSS 0.14%

Does this matter?

Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Gallery allows attackers to enable Location information sharing from the lock screen. The Samsung ID is SVE-2019-14462 (August 2019).

CVSS 3.1
2.4 LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.14% probability · 3th percentile
CISA KEV
Not listed
Weakness
CWE-306
Affected
google/android
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.