CVE-2020-15165CWE-506

Potentially tampered sources on Play Store for Chameleon Mini Live Debugger

Critical · published August 28, 2020

CVSS v3.1
9.3
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

🚨 A crafty tampering of permissions could put your Chameleon Mini Live Debugger at risk! 🔥 Think of it like someone sneaking into a restaurant and swapping the chef's secret recipe with a fake one — the food might look the same, but the taste is a whole different story! If an attacker successfully modifies the package, they could gain unauthorized access and manipulate data, potentially leading to devastating consequences like data theft or unauthorized actions. Your device could become a puppet, doing things you never intended!

Put simply

Think of it like someone sneaking into a restaurant and swapping the chef's secret recipe with a fake one — the food might look the same, but the taste is a whole different story! CVE-2020-15165 allows malicious actors to alter the sources or permissions of the Chameleon Mini Live Debugger, posing a serious risk to users who downloaded version 1.1.6-free from the Google Play Store.

What to do

If an attacker successfully modifies the package, they could gain unauthorized access and manipulate data, potentially leading to devastating consequences like data theft or unauthorized actions. Your device could become a puppet, doing things you never intended! Upgrade to version 1.1.8 immediately to secure your installation and prevent any unauthorized access. It’s crucial to check your current version and ensure that you’re protected against potential tampering! You've got this! Follow these steps and you'll be back to debugging securely in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01323 · 70.7th percentile
Weakness
CWE-506 · Embedded Malicious Code
Published
2020-08-28T17:30Z
EPSS history
Timeline
  • 28 AUG 17:30Z
    Potentially tampered sources on Play Store for Chameleon Mini Live Debugger
    cvelistv5