CVE-2020-0265

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150155839

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Sep 18, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-02667.8In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilCVE-2020-02677.8In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilegeCVE-2020-02686.4In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution pCVE-2020-02695.5In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosCVE-2020-02706.5In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no aCVE-2020-02717.3In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User executionCVE-2020-02724.4In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with SCVE-2020-02737.8In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This could lead to local escalation of privilegeCVE-2020-02745.5In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local information disclosureCVE-2020-02757.8In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissCVE-2020-02765.5In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with CVE-2020-02777.8In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lead to local escalatio
CVE-2020-0265: Medium severity, CVSS 5.5 | Vulnix