critical9.8
CVE-2020-26607
An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
Impact
An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18418 (October 2020).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 8.0, 8.1, 9.0, 10.0 |