CVE-2020-0094

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-148223871

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
May 14, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-00967.8In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead toCVE-2020-00977.8In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This couCVE-2020-00987.8In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalaCVE-2020-00997.8In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to loCVE-2020-01005.5In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disCVE-2020-01015.5In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local inforCVE-2020-01027.8In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to CVE-2020-01039.8In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote codCVE-2020-01045.5In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to localCVE-2020-01057.8In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local escalation of privileCVE-2020-01065.5In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead CVE-2020-01075.5In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead
CVE-2020-0094: High severity, CVSS 7.8 | Vulnix