CVE-2020-0121

In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error

published June 10, 2020

CVSS
—
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148180766

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Published
2020-06-10T17:11Z
EPSS history
Timeline
  • 10 JUN 17:11Z
    In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error
    cvelistv5