CVE-2020-0074

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146204120

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-00754.4In set_shared_key of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to loCVE-2020-00766.7In get_auth_result of the FPC IRIS TrustZone app, there is a possible out of bounds write due to a missing bounds check. This could lead to CVE-2020-00774.4In authorize_enroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to CVE-2020-00787.8In releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escaCVE-2020-00797.8In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of priCVE-2020-00807.8In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps withoCVE-2020-00817.8In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilegeCVE-2020-00827.8In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This coCVE-2020-00837.5In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could leaCVE-2020-00847.8In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privileCVE-2020-00857.8In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to locCVE-2020-00869.8In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code executio
CVE-2020-0074: High severity, CVSS 7.8 | Vulnix