CVE-2020-0407

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs (Initialization Vectors), 64-bit IVs are used and later are truncated to 32 bits. This may cause IV reuse and thus weakened disk encryption. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153450752References: N/A

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-330

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-04087.8In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilCVE-2020-04097.8In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privileCVE-2020-04105.5In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local informatiCVE-2020-04116.5In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote informaCVE-2020-04123.3In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclCVE-2020-04137.5In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remCVE-2020-04146.5In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions byCVE-2020-04155.5In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informationCVE-2020-04168.8In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation ofCVE-2020-04177.8In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This coulCVE-2020-04187.8In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution prCVE-2020-04195.5In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing
CVE-2020-0407: Medium severity, CVSS 4.4 | Vulnix