CVE-2020-1895

7.8 highEPSS 0.9%

High (7.8) in facebook instagram. EPSS 0.9% chance of exploitation in the next 30 days.

A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWEs: CWE-190, CWE-680
Published: 2020-04-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

facebook:instagram

References

https://www.facebook.com/security/advisories/cve-2020-1895
https://www.facebook.com/security/advisories/cve-2020-1895

Check your stack JSON