CVE-2020-0203

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146313311

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-404

Affected software

VendorProductVersions
n/aAndroidAndroid-10

References

Timeline

Published
Jun 11, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-02047.0In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lCVE-2020-02056.5In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check. This could leCVE-2020-02065.5In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of service of the SettiCVE-2020-02076.5In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote informationCVE-2020-02087.8In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with CVE-2020-02097.8In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with CVE-2020-02107.8In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This could lead to local eCVE-2020-02116.5In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to rCVE-2020-02126.5In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote iCVE-2020-02136.5In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s, there is a possible out of bounds write due to a heap buffer overfCVE-2020-02147.5In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to CVE-2020-02157.8In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypass. This could lead t
CVE-2020-0203: High severity, CVSS 7.8 | Vulnix