CVE-2019-12087

5.5 mediumEPSS 0.4%

Medium (5.5) in samsung. EPSS 0.4% chance of exploitation in the next 30 days.

Samsung S9+, S10, and XCover 4 P(9.0) devices can become temporarily inoperable because of an unprotected intent in the ContainerAgent application. For example, the victim becomes stuck in a launcher with their Secure Folder locked. NOTE: the researcher mentions "the Samsung Security Team considered this issue as no/little security impact.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2019-05-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

samsung:s10_firmware
samsung:s9\+_firmware
samsung:xcover_4_firmware

References

https://github.com/fs0c131y/SamsungLocker
https://github.com/fs0c131y/SamsungLocker

Check your stack JSON