CVE-2020-0473

In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass

published December 15, 2020

CVSS
—
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical possession of the device to transfer files to it over Bluetooth, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160691486

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00151 · 3.9th percentile
Published
2020-12-15T15:53Z
EPSS history
Timeline
  • 15 DEC 15:53Z
    In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass
    cvelistv5