CVE-2020-0086

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code execution if IntSan were not enabled, which it is by default. No additional execution privileges are required. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-131859347

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Mar 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-00875.5In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local informati CVE-2020-00886.5In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to r CVE-2020-00897.8In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no CVE-2020-00905.5An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048 CVE-2020-00915.5In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700 CVE-2020-00925.0In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permiss CVE-2020-00935.0In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local CVE-2020-00947.8In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could l CVE-2020-00967.8In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to CVE-2020-00977.8In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This cou CVE-2020-00987.8In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escala CVE-2020-00997.8In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to lo