Vulnerability in Google Android
CVE-2020-25056
An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software. Because HAL improperly checks versions, bootloading by the S.LSI NFC chipset is mishandled. The Samsung ID is SVE-2020-16169 (August 2020).
EPSS: 0.004 (29.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Google Android — versions 10.0
- Samsung Galaxy_s20
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-25056?
- CVE-2020-25056 is a high-severity vulnerability in Google Android, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2020-08-31.
- How severe is CVE-2020-25056?
- High severity. CVSS v3 base score is 7.5 out of 10.