CVE-2020-0080

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144092031

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Apr 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-00817.8In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege CVE-2020-00827.8In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This co CVE-2020-00837.5In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could lea CVE-2020-00847.8In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privile CVE-2020-00857.8In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to loc CVE-2020-00869.8In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code executio CVE-2020-00875.5In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local informati CVE-2020-00886.5In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to r CVE-2020-00897.8In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no CVE-2020-00905.5An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048 CVE-2020-00915.5In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700 CVE-2020-00925.0In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permiss