CVE-2020-0196

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper input validation. This could lead to remote denial of service of the Bluetooth service, over Bluetooth, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144066833

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-01975.5In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead toCVE-2020-01987.5In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial CVE-2020-01994.1In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to lCVE-2020-02006.5In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inCVE-2020-02019.8In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This could lead to remote eCVE-2020-02027.8In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a mCVE-2020-02037.8In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of CVE-2020-02047.0In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lCVE-2020-02056.5In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check. This could leCVE-2020-02065.5In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of service of the SettiCVE-2020-02076.5In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote informationCVE-2020-02087.8In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with
CVE-2020-0196: Medium severity, CVSS 6.5 | Vulnix