CVE-2020-0060

In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection

published March 10, 2020

CVSS
—
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143229845

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.7th percentile
Published
2020-03-10T20:00Z
EPSS history
Timeline
  • 10 MAR 20:00Z
    In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection
    cvelistv5