CVE-2020-8913

CVE-2020-8913 is a local, arbitrary code execution vulnerability in Android's Play Core Library versions prior to 1.7.2. An attacker could craft a malicious APK that, if installed by a victim, allows for directory traversal and code execution within the targeted application, granting access to its data. This vulnerability carries a high CVSS score of 8.8, indicating a high potential for impact on confidentiality, integrity, and availability, with a network attack vector and low attack complexity, though user interaction is required. While there is no evidence of active exploitation (KEV: No), the vulnerability has garnered significant community discussion and media coverage, suggesting awareness and potential for future exploitation.