What’s Vulnerable › Vulnerabilities
CVE-2020-7745: Malicious Package
- Severity: critical (CVSS 10.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-10-19 · updated 2026-06-17
- Weakness: CWE-94
Description
This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral and their partners (advertisers) can remotely execute arbitrary code on a user device.
Affected products
- MintegralAdSDK: before 6.6.0.0 — fixed in 6.6.0.0
How to fix
Upgrade to a fixed version: MintegralAdSDK 6.6.0.0. Check the vendor advisory for mitigations.
References
- https://snyk.io/blog/remote-code-execution-rce-sourmint/
- https://snyk.io/research/sour-mint-malicious-sdk/%23rce
- https://snyk.io/vuln/SNYK-COCOAPODS-MINTEGRALADSDK-1019377
- https://www.youtube.com/watch?v=n-mEMkeoUqs
- https://snyk.io/blog/remote-code-execution-rce-sourmint/
- https://snyk.io/research/sour-mint-malicious-sdk/%23rce
- https://snyk.io/vuln/SNYK-COCOAPODS-MINTEGRALADSDK-1019377
- https://www.youtube.com/watch?v=n-mEMkeoUqs
Get alerted when CVE-2020-7745 or the next vulnerability affects your stack