CVE-2020-0271

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144507081

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1188

Affected software

No affected versions have been published.

Timeline

Published
Sep 18, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-02724.4In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with SCVE-2020-02737.8In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This could lead to local escalation of privilegeCVE-2020-02745.5In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local information disclosureCVE-2020-02757.8In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissCVE-2020-02765.5In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with CVE-2020-02777.8In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lead to local escalatioCVE-2020-02789.8There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812574CVE-2020-02796.5In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wiCVE-2020-02805.5In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to localCVE-2020-02814.5In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execuCVE-2020-02824.5In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execuCVE-2020-02839.1There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008257
CVE-2020-0271: High severity, CVSS 7.3 | Vulnix