cve/2019/CVE-2019-20591.md

### [CVE-2019-20591](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20591)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the Gear VR Service Content Provider. The Samsung ID is SVE-2019-14058 (July 2019).

### POC

#### Reference
- https://security.samsungmobile.com/securityUpdate.smsb
- https://security.samsungmobile.com/securityUpdate.smsb

#### Github
No PoCs found on GitHub currently.