What’s Vulnerable › Vulnerabilities

CVE-2019-12087

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-05-14 · updated 2026-06-17
• Weakness: CWE-399

Description

Samsung S9+, S10, and XCover 4 P(9.0) devices can become temporarily inoperable because of an unprotected intent in the ContainerAgent application. For example, the victim becomes stuck in a launcher with their Secure Folder locked. NOTE: the researcher mentions "the Samsung Security Team considered this issue as no/little security impact.

Affected products

• Samsung S10 Firmware: all versions
• Samsung S9+ Firmware: all versions
• Samsung Xcover 4 Firmware: all versions

References

• https://github.com/fs0c131y/SamsungLocker
• https://github.com/fs0c131y/SamsungLocker

Get alerted when CVE-2019-12087 or the next vulnerability affects your stack