CVE-2020-0088

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124389881

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Mar 15, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-00897.8In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no CVE-2020-00905.5An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048CVE-2020-00915.5In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700CVE-2020-00925.0In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissCVE-2020-00935.0In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local CVE-2020-00947.8In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lCVE-2020-00967.8In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead toCVE-2020-00977.8In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This couCVE-2020-00987.8In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalaCVE-2020-00997.8In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to loCVE-2020-01005.5In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disCVE-2020-01015.5In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local infor
CVE-2020-0088: Medium severity, CVSS 6.5 | Vulnix