← Back

CVE-2020-15165

nvd nist
Published: Aug 28, 2020Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHub Security Advisory.

Affected (1)

Chameleon Mini Live Debugger Project
1 product
Chameleon Mini Live Debugger
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Chameleon Mini Live Debugger
Version 1.1.6

Related CWEs

CWE-506
Embedded Malicious Code
The product contains code that appears to be malicious in nature.

References (4)

Source: security-advisories@github.com
ExploitThird Party Advisory
Source: security-advisories@github.com
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory

Timeline

No history available yet.