CVE-2019-20573: 
NixOS vulnerability analysis and mitigation

An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the RCS Content Provider. The Samsung IDs are SVE-2019-14059, SVE-2019-14685 (August 2019) (CVE Details, MITRE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVE Details).

The vulnerability allows local attackers to potentially execute SQL injection attacks against the RCS Content Provider, which could lead to unauthorized access, modification, or deletion of data with high impacts on confidentiality, integrity, and availability (CVE Details).

The vulnerability requires local access to the device and low privileges to exploit. No user interaction is needed for exploitation (CVE Details).

Samsung has addressed this vulnerability through security updates. Users should ensure their devices are updated with the latest security patches (Samsung Mobile Security).