CVE-2020-36245: Gramaddict

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.

Affected products

• Gramaddict Gramaddict: up to and including 1.2.3

Published 2021-02-17. Last modified 2026-06-17.