CVE-2020-0079

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144506242

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Apr 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-00807.8In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps witho CVE-2020-00817.8In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege CVE-2020-00827.8In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This co CVE-2020-00837.5In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could lea CVE-2020-00847.8In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privile CVE-2020-00857.8In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to loc CVE-2020-00869.8In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code executio CVE-2020-00875.5In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local informati CVE-2020-00886.5In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to r CVE-2020-00897.8In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no CVE-2020-00905.5An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048 CVE-2020-00915.5In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700