CVE-2020-7745

HIGH 7.1CVE-2020-7745 · Published 19/10/2020 · updated 17/06/2026

In short

CVE-2020-7745 is a HIGH (CVSS 7.1) vulnerability affecting mintegraladsdk (mintegral).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 85.8% of all vulnerabilities.
Fix: update to 6.6.0.0 or later.

Package	Affected versions	Patched versions
mintegraladsdk mintegral	`< 6.6.0.0`	`6.6.0.0`

Description

This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral and their partners (advertisers) can remotely execute arbitrary code on a user device.

References

snyk.io/blog/remote-code-execution-rce-sourmint · Third Party Advisory
snyk.io/research/sour-mint-malicious-sdk/%23rce · Broken Link
snyk.io/vuln/SNYK-COCOAPODS-MINTEGRALADSDK-1019377 · Third Party Advisory
youtube.com/watch · Exploit

More vulnerabilities in mintegraladsdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free