CVE-2020-0004

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120847476

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-755

Affected software

No affected versions have been published.

Timeline

Published
Jan 8, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-00056.7In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds check. This could leCVE-2020-00066.5In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data. ThiCVE-2020-00075.5In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to locCVE-2020-00084.7In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lCVE-2020-00095.5In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to localCVE-2020-00106.7In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local esCVE-2020-00116.7In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escaCVE-2020-00126.7In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead toCVE-2020-00145.5It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. This could lead to a loCVE-2020-00157.8In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This cCVE-2020-00167.8In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with nCVE-2020-00174.4In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to