CVE-2020-26607: Google Android

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18418 (October 2020).

Affected products

• Google Android: version 8.0 only; version 8.1 only; version 9.0 only; version 10.0 only

Published 2020-10-06. Last modified 2026-06-17.