VULNERABILITY INTELLIGENCE
CVE-2020-0375
CVSS score7.8 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2020-09-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253476
Weakness classification
- nvd@nist.gov: CWE-862
Primary references
- security@android.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory