VULNERABILITY INTELLIGENCE

CVE-2020-12751

CVSS score7.8 HIGH
EPSS probability0.47%
CISA KEVNot currently listed
Published2020-05-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 (May 2020).

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references