CVE-2020-0443

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-152410253

Affected

Android

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0 NVD

2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.32% chance of exploitation in the next 30 days, 24th percentile

Published

2020-11-10

Updated

2024-08-04

Proof-of-concept exploits (1)

• Supersonic/CVE-2020-044318★ · 2022-03-15

Security advisories

• https://source.android.com/security/bulletin/2020-11-01

References

• CVE Record
• NVD entry

Related

• CVE-2021-39670
• CVE-2021-39690
• CVE-2022-20494
• CVE-2026-49881