CVE-2020-12746: Buffer Overflow

Published May 11, 2020

Updated

An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) (Exynos chipsets) software. Attackers can bypass the Secure Bootloader protection mechanism via a heap-based buffer overflow to execute arbitrary code. The Samsung ID is SVE-2020-16712 (May 2020).

Affected Software

4 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Event History

May 11, 2020

CVE Published

via MITRE·03:12 PM

Data Sourced

via MITRE·03:12 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-12746?

CVE-2020-12746 has a critical severity rating due to the potential for attackers to execute arbitrary code.

What devices are affected by CVE-2020-12746?

CVE-2020-12746 affects Samsung mobile devices with Exynos chipsets running Android versions 8.0, 8.1, 9.0, and 10.0.

How do I fix CVE-2020-12746?

To fix CVE-2020-12746, ensure your device is updated to the latest security patch released by Samsung.

Can CVE-2020-12746 be exploited remotely?

Yes, CVE-2020-12746 can be exploited remotely by leveraging the heap-based buffer overflow vulnerability.

Is there a workaround for CVE-2020-12746?

There are no effective workarounds for CVE-2020-12746; the best course of action is to apply the relevant security updates promptly.