CVEvulnerability

CVE-2020-26604

7.5 HIGH Published 2020-10-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-10-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

An issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. PendingIntent allows an unprivileged process to access contact numbers. The Samsung ID is SVE-2020-18467 (October 2020).

Affected configurations

• google android 8.0 • google android 8.1 • google android 9.0 • google android 10.0 • google android 11.0

References