CVE-2020-15165
- Source
- https://cve.org/CVERecord?id=CVE-2020-15165
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-15165.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-15165
- Related
- Published
- 2020-08-28T18:15:10.167Z
- Modified
- 2026-02-02T02:15:03.524663Z
- Severity
-
- 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHub Security Advisory.
- References
-
- https://play.google.com/store/apps/details?id=com.maxieds.chameleonminilivedebugger&hl=en_US
- https://github.com/maxieds/ChameleonMiniLiveDebugger/security/advisories/GHSA-8q77-7hq8-f7g6
- https://play.google.com/store/apps/details?id=com.maxieds.chameleonminilivedebugger&hl=en_US
- https://github.com/maxieds/ChameleonMiniLiveDebugger/security/advisories/GHSA-8q77-7hq8-f7g6
Affected packages
Git / github.com/maxieds/chameleonminilivedebugger
Affected ranges
- Type
- GIT
- Repo
- https://github.com/maxieds/chameleonminilivedebugger
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
0.*
0.3.4-free
0.3.6-free
0.3.7-free
0.3.8-free
0.3.9-free
0.4.0-free
0.4.1-free
0.4.2-free
0.4.4-free
0.4.6-free
0.4.7-free
0.4.8-free
0.4.9-free
0.5.1-free
0.5.2-free
0.5.8-free
0.5.8-free-r2
0.5.9-free
0.5.9-free-r2
0.6.0-free
Other
current-apk
v0.*
v0.1.4
v0.1.5
v0.1.6
v0.1.7
v0.1.8
v0.1.9
v0.2.0
v0.2.2
v0.2.3
v0.2.6
v0.2.7
v0.2.8
v0.2.9
v0.3.0
v0.3.1
v0.3.2
v0.5.3
v0.5.4
v0.5.7
v1.*
v1.0.0-free
v1.0.1-free
v1.0.8-free
v1.1.1-free
v1.1.2-free
v1.1.3-free
v1.1.4-free
v1.1.6-free