CVE-2020-12485

5.5 mediumEPSS 0.3%

Medium (5.5) in vivo frame touch module. EPSS 0.3% chance of exploitation in the next 30 days.

The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory access.The vulnerability eventually leads to a local DOS on the device.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2020-11-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vivo:frame_touch_module

References

https://www.vivo.com/en/support/security-advisory-detail?id=2
https://www.vivo.com/en/support/security-advisory-detail?id=2

Check your stack JSON