CVE-2020-25278: Critical severity android vulnerability

Published Sep 11, 2020

Updated

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung IDs are SVE-2020-18088, SVE-2020-18225, SVE-2020-18301 (September 2020).

Affected Software

4 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Event History

Sep 11, 2020

CVE Published

via MITRE·09:07 PM

Data Sourced

via MITRE·09:07 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-25278?

CVE-2020-25278 has a high severity rating due to its potential to allow arbitrary code execution on affected devices.

How do I fix CVE-2020-25278?

To mitigate CVE-2020-25278, users should update their Samsung mobile devices to the latest security patches provided by Samsung.

Which devices are affected by CVE-2020-25278?

CVE-2020-25278 affects Samsung mobile devices running Android versions 8.0, 8.1, 9.0, and 10.0.

What type of attacks does CVE-2020-25278 enable?

CVE-2020-25278 enables attackers to overwrite memory and execute arbitrary code via specially crafted JPEG images.

Is CVE-2020-25278 specific to any particular app?

CVE-2020-25278 is not specific to any app; it affects the Quram image codec library utilized by Samsung devices during JPEG decoding.