CVE-2020-0379

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150156492

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Sep 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-03809.8In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code e CVE-2020-03817.5In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information discl CVE-2020-03822.3In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information CVE-2020-03835.5In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information dis CVE-2020-03845.5In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information CVE-2020-03855.5In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information CVE-2020-03865.5In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to lo CVE-2020-03877.8In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to loc CVE-2020-03887.8In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable Pen CVE-2020-03895.5In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to CVE-2020-03905.5In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional exec CVE-2020-03917.8In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadca