CVE-2020-0114

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147606347

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
n/aAndroidAndroid-10

References

Timeline

Published
Jun 10, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-01157.8In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handCVE-2020-01165.5In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass.CVE-2020-01179.8In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in CVE-2020-01187.8In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to locCVE-2020-01195.3In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper CVE-2020-01207.8In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead CVE-2020-01215.5In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local informatioCVE-2020-01226.7In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible peCVE-2020-01239.8There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374CVE-2020-01246.7In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to CVE-2020-01255.5In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no aCVE-2020-01266.4In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution
CVE-2020-0114: High severity, CVSS 7.8 | Vulnix