CVE-2020-15165

Katalog CVE

CVSS 9.1 · Critical EPSS 1,3%

Kerentanan Embedded Malicious Code pada chameleon mini live debugger project chameleon mini live debugger. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHub Security Advisory.

Rincian

Terbit di NVD

28 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-506: Embedded Malicious Code

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/maxieds/ChameleonMiniLiveDebugger/security/advisories/GHSA-8q77-7hq8-f7g6 exploit · advisory pihak ketiga
• https://play.google.com/store/apps/details?id=com.maxieds.chameleonminilivedebugger&hl=en_US product · advisory pihak ketiga