CVE-2020-0406

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allowed this to be triggered with different parameters, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137794014

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-04074.4In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only sCVE-2020-04087.8In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilCVE-2020-04097.8In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privileCVE-2020-04105.5In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local informatiCVE-2020-04116.5In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote informaCVE-2020-04123.3In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclCVE-2020-04137.5In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remCVE-2020-04146.5In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions byCVE-2020-04155.5In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informationCVE-2020-04168.8In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation ofCVE-2020-04177.8In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This coulCVE-2020-04187.8In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution pr
CVE-2020-0406: High severity, CVSS 7.8 | Vulnix