CVE-2020-0439

In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check

published November 10, 2020

CVSS
—
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This could lead to local escalation of privilege that allows instant apps access to permissions not allowed for instant apps, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-140256621

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Published
2020-11-10T12:46Z
EPSS history
Timeline
  • 10 NOV 12:46Z
    In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check
    cvelistv5