CVE-2020-0258

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application that is started next with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-157598956

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-459

Affected software

VendorProductVersions
n/aAndroidAndroid-10

References

Timeline

Published
Aug 11, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-02597.8In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to improperly used crypCVE-2020-02609.1There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152225183CVE-2020-02617.8In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to local escalation of priviCVE-2020-02627.8In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of priCVE-2020-02635.5In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disCVE-2020-02648.8In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no addiCVE-2020-02655.5In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure wCVE-2020-02667.8In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilCVE-2020-02677.8In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilegeCVE-2020-02686.4In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution pCVE-2020-02695.5In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosCVE-2020-02706.5In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no a
CVE-2020-0258: Medium severity, CVSS 5.5 | Vulnix