CVE-2020-0356

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143787559

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-03577.8In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphCVE-2020-03586.4In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System CVE-2020-03595.5In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with nCVE-2020-03607.8In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation oCVE-2020-03616.5In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with noCVE-2020-03626.5In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service witCVE-2020-03636.5In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no aCVE-2020-03646.5In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2020-03655.5In netd, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additionaCVE-2020-03667.8In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local escalation of privilCVE-2020-03679.1There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980455CVE-2020-03683.3In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local i
CVE-2020-0356: Medium severity, CVSS 6.7 | Vulnix