Vulnerability Details : CVE-2019-16253
The Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755.
Products affected by CVE-2019-16253
- Samsung » Text-to-speech » For AndroidVersions from including (>=) 3.0.00.102 and before (<) 3.0.02.7cpe:2.3:a:samsung:text-to-speech:*:*:*:*:*:android:*:*
- cpe:2.3:a:samsung:text-to-speech:*:*:*:*:*:android:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-16253
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 6 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-16253
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
References for CVE-2019-16253
-
https://github.com/flankerhqd/vendor-android-cves/tree/master/SMT-CVE-2019-16253
vendor-android-cves/SMT-CVE-2019-16253 at master · flankerhqd/vendor-android-cves · GitHub
-
http://packetstormsecurity.com/files/154614/Samsung-Mobile-Android-SamsungTTS-Privilege-Escalation.html
Samsung Mobile Android SamsungTTS Privilege Escalation ≈ Packet StormExploit;Third Party Advisory;VDB Entry
-
https://blog.flanker017.me/text-to-speech-speaks-pwned/
Text-To-Speech speaks pwned | Flanker Sky
Jump to