CVE-2020-0081

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144028297

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415 CWE-787

Affected software

Vendor	Product	Versions
n/a	Android	Android-8.0 Android-8.1 Android-9 Android-10

References

Timeline

Published: Apr 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-00827.8In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This co CVE-2020-00837.5In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could lea CVE-2020-00847.8In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privile CVE-2020-00857.8In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to loc CVE-2020-00869.8In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code executio CVE-2020-00875.5In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local informati CVE-2020-00886.5In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to r CVE-2020-00897.8In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no CVE-2020-00905.5An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048 CVE-2020-00915.5In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700 CVE-2020-00925.0In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permiss CVE-2020-00935.0In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local