CVE-2020-0394

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing contact lists with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155648639

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1021 CWE-1188

Affected software

Vendor	Product	Versions
n/a	Android	Android-8.0 Android-8.1 Android-9 Android-10 Android-11

References

https://source.android.com/security/bulletin/2020-09-01Vendor Advisory
https://source.android.com/security/bulletin/2020-09-01Vendor Advisory

Timeline

Published: Sep 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-03955.5In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could l CVE-2020-03965.5In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information d CVE-2020-03975.5In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This cou CVE-2020-03985.5In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local informati CVE-2020-03995.5In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. CVE-2020-04005.5In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lea CVE-2020-04017.8In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privil CVE-2020-04036.7In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local e CVE-2020-04045.5In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local CVE-2020-04057.8In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead to local escalation CVE-2020-04067.8In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a CVE-2020-04074.4In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only s