VULNERABILITY INTELLIGENCE

CVE-2020-25048

CVSS score4.6 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2020-08-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticated downloads, aka file injection. The Samsung ID is SVE-2020-17760 (August 2020).

Weakness classification

  • nvd@nist.gov: CWE-306

Primary references