CVE-2020-12751: Google Android

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 (May 2020).

Affected products

• Google Android: version 8.0 only; version 8.1 only; version 9.0 only; version 10.0 only

Published 2020-05-11. Last modified 2026-06-17.