CVE-2020-25052: Critical severity android vulnerability

Published Aug 31, 2020

Updated

An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H-Arx allows attackers to execute arbitrary code or cause a denial of service (memory corruption) because indexes are mishandled. The Samsung ID is SVE-2020-17426 (August 2020).

Affected Software

2 affected components

Google Android=10.0

Samsung Exynos 9830

Event History

Aug 31, 2020

CVE Published

via MITRE·08:24 PM

Data Sourced

via MITRE·08:24 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2020-25052.

What is the severity rating of CVE-2020-25052?

The severity rating of CVE-2020-25052 is critical, with a CVSS score of 9.8.

Which Samsung mobile devices are affected by this vulnerability?

Samsung mobile devices with Q(10.0) software and exynos9830 chipsets are affected by this vulnerability.

What is the potential impact of this vulnerability?

This vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) due to mishandled indexes.

Is there a fix available for CVE-2020-25052?

Yes, Samsung has released a security update addressing this vulnerability. Please refer to the Samsung Security Update page for more information.