CVE-2020-0418
HIGH 7.8EPSS 0.3%
In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153879813
- Affected
- Android
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 0.27% chance of exploitation in the next 30 days, 18th percentile
- Published
- 2020-11-10
- Updated
- 2024-08-04
Proof-of-concept exploits (2)
- Trinadh465/packages_apps_PackageInstaller_AOSP10_r33_CVE-2020-04180★ · 2022-04-30
- fernandodruszcz/CVE-2020-04180★ · 2023-02-23