CVE-2020-0006

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to remote information disclosure in the NFC server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-139738828

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-908

Affected software

No affected versions have been published.

Timeline

Published: Jan 8, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-00075.5In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to loc CVE-2020-00084.7In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could l CVE-2020-00095.5In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local CVE-2020-00106.7In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local es CVE-2020-00116.7In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local esca CVE-2020-00126.7In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to CVE-2020-00145.5It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. This could lead to a lo CVE-2020-00157.8In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This c CVE-2020-00167.8In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with n CVE-2020-00174.4In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to CVE-2020-00184.4In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lead to local disclosur CVE-2020-00195.5In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no