CVE-2020-0097
HIGH 7.8EPSS 0.2%
In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local escalation of privilege with User privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-145981139
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 0.17% chance of exploitation in the next 30 days, 6th percentile
- Published
- 2020-05-14
- Updated
- 2024-08-04
Proof-of-concept exploits (5)
- Nivaskumark/CVE-2020-0097-frameworks_ba0★ · 2021-11-26
- Nivaskumark/CVE-2020-0097-frameworks_base0★ · 2021-11-29
- Nivaskumark/CVE-2020-0097-frameworks_base_after0★ · 2021-11-25
- Nivaskumark/CVE-2020-0097-frameworks_base_afterfix0★ · 2021-11-29
- Nivaskumark/CVE-2020-0097-frameworks_base_before0★ · 2021-11-25