{"id":"CVE-2020-13832","aliases":["EUVD-2020-6045","GHSA-vx3f-c8rp-4q58"],"status":"published","title":"An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets)...","description":"An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 (June 2020).","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00678,"percentile":0.52584,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-20"],"published":"2020-06-04T17:06:43Z","modified":"2026-06-17T02:53:44Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://security.samsungmobile.com/securityUpdate.smsb","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13832"},{"url":"https://github.com/advisories/GHSA-vx3f-c8rp-4q58"}],"sources":{"cve":[{"id":"CVE-2020-13832","description":"An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 (June 2020).","status":"published","published":"2020-06-04T17:06:43Z","modified":"2024-08-04T12:25:16.543Z","updated_at":"2026-11-02T14:35:53.868619Z"}],"euvd":[{"id":"EUVD-2020-6045","description":"An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 (June 2020).","status":"published","published":"2020-06-04T17:06:43Z","modified":"2024-08-04T12:25:16Z","updated_at":"2026-11-03T03:07:36.182524Z"}],"ghsa":[{"id":"GHSA-vx3f-c8rp-4q58","title":"An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets)...","description":"An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 (June 2020).","status":"published","published":"2022-05-24T17:19:21Z","modified":"2023-01-29T05:02:50Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:45:10.945052Z"}],"nvd":[{"id":"CVE-2020-13832","description":"An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 (June 2020).","status":"published","published":"2020-06-04T18:15:14.453Z","modified":"2026-06-17T02:53:44.493Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-20","CWE-119"],"updated_at":"2026-11-02T14:06:05.962132Z"}]}}