CVE-2020-35551

—

CVSS 3.1

9.8 critical

EPSS

<1%p35

Published

Dec 18, 2020 (Dec 18, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. They allow attackers to conduct RPMB state-change attacks because an unauthorized RPMB write operation can be replayed, a related issue to CVE-2020-13799. The Samsung ID is SVE-2020-18100 (December 2020).

Vendors: google
Products: android
Weakness: CWE-294
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.