CVE-2020-11603

9.8 criticalEPSS 0.8%

Critical (9.8) in google android. EPSS 0.8% chance of exploitation in the next 30 days.

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software. Type confusion in the MLDAP Trustlet allows arbitrary code execution. The Samsung ID is SVE-2020-16599 (April 2020).

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-843
Published: 2020-04-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://security.samsungmobile.com/securityUpdate.smsb
https://www.tuttoandroid.net/samsung/samsung-patch-sicurezza-aprile-2020-798658/
https://security.samsungmobile.com/securityUpdate.smsb
https://www.tuttoandroid.net/samsung/samsung-patch-sicurezza-aprile-2020-798658/

Check your stack JSON