CVE-2020-11604: Google Android

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software. There is an Out-of-bounds read in the MLDAP Trustlet. The Samsung ID is SVE-2019-16565 (April 2020).

Affected products

• Google Android: version 9.0 only; version 10.0 only

Published 2020-04-08. Last modified 2026-06-17.