CVE-2020-0346

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled (which it is by default), with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002762

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-03476.7In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withCVE-2020-03484.9In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC withCVE-2020-03494.4In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System exCVE-2020-03506.7In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2020-03516.5In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no adCVE-2020-03525.5In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additCVE-2020-03536.5In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with CVE-2020-03549.8In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additiCVE-2020-03556.5In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure CVE-2020-03566.7In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegeCVE-2020-03577.8In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphCVE-2020-03586.4In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System
CVE-2020-0346: High severity, CVSS 7.8 | Vulnix