VULNERABILITY INTELLIGENCE
CVE-2020-0382
CVSS score2.3 LOW
EPSS probability0.15%
CISA KEVNot currently listed
Published2020-09-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Description
In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488
Weakness classification
- nvd@nist.gov: CWE-755
Primary references
- security@android.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory