CVE-2020-0007

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-141890807

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-908

Affected software

No affected versions have been published.

Timeline

Published
Jan 8, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-00084.7In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lCVE-2020-00095.5In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to localCVE-2020-00106.7In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local esCVE-2020-00116.7In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escaCVE-2020-00126.7In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead toCVE-2020-00145.5It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. This could lead to a loCVE-2020-00157.8In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This cCVE-2020-00167.8In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with nCVE-2020-00174.4In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead toCVE-2020-00184.4In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lead to local disclosurCVE-2020-00195.5In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with noCVE-2020-00205.5In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect
CVE-2020-0007: Medium severity, CVSS 5.5 | Vulnix