CVE-2020-0257

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Aug 11, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-02585.5In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application CVE-2020-02597.8In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to improperly used crypCVE-2020-02609.1There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152225183CVE-2020-02617.8In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to local escalation of priviCVE-2020-02627.8In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of priCVE-2020-02635.5In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disCVE-2020-02648.8In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no addiCVE-2020-02655.5In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure wCVE-2020-02667.8In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilCVE-2020-02677.8In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilegeCVE-2020-02686.4In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution pCVE-2020-02695.5In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclos
CVE-2020-0257: High severity, CVSS 7.8 | Vulnix