CVE-2019-20590

9.8 criticalEPSS 0.4%

Critical (9.8) in google android. EPSS 0.4% chance of exploitation in the next 30 days.

An issue was discovered on Samsung mobile devices with O(8.x) (Qualcomm chipsets) software. There is an integer underflow in the Secure Storage Trustlet. The Samsung ID is SVE-2019-13952 (July 2019).

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-191
Published: 2020-03-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://security.samsungmobile.com/securityUpdate.smsb
https://security.samsungmobile.com/securityUpdate.smsb

Check your stack JSON