CVE-2020-0336

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787CWE-843

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-03375.5In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosurCVE-2020-03385.0In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure withCVE-2020-03399.1There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705CVE-2020-03406.5In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information discloCVE-2020-03417.8In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilegeCVE-2020-03429.8There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576CVE-2020-03435.5In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local informationCVE-2020-03445.5In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additCVE-2020-03457.8In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no addCVE-2020-03467.8In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if inteCVE-2020-03476.7In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withCVE-2020-03484.9In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with
CVE-2020-0336: Medium severity, CVSS 6.7 | Vulnix