CVE-2020-0303

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148223229

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416CWE-667

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-03045.5In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with UserCVE-2020-03056.4In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege withCVE-2020-03067.8In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation oCVE-2020-03075.5In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with UserCVE-2020-03085.5In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure witCVE-2020-03096.7In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilegCVE-2020-03105.5In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with UserCVE-2020-03115.5In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosurCVE-2020-03125.5In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure withCVE-2020-03135.5In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information diCVE-2020-03145.5In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additioCVE-2020-03155.5In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User
CVE-2020-0303: High severity, CVSS 8.8 | Vulnix