CVE-2020-0404

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-04057.8In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead to local escalationCVE-2020-04067.8In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if aCVE-2020-04074.4In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only sCVE-2020-04087.8In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilCVE-2020-04097.8In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privileCVE-2020-04105.5In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local informatiCVE-2020-04116.5In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote informaCVE-2020-04123.3In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclCVE-2020-04137.5In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remCVE-2020-04146.5In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions byCVE-2020-04155.5In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informationCVE-2020-04168.8In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of
CVE-2020-0404: Medium severity, CVSS 5.5 | Vulnix