CVE-2019-19273

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-02-04 · updated 2026-06-17
Weakness: CWE-787

Description

On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbitrary memory write operations. The Samsung ID is SVE-2019-16265.

Affected products

Android: 8.0, 9.0
Samsung Exynos 8895: all versions

References

https://census-labs.com/news/2020/10/08/samsung-hypervisor-rkp-arbitrary-zero-write/
https://security.samsungmobile.com/securityUpdate.smsb
https://census-labs.com/news/2020/10/08/samsung-hypervisor-rkp-arbitrary-zero-write/
https://security.samsungmobile.com/securityUpdate.smsb

Get alerted when CVE-2019-19273 or the next vulnerability affects your stack