VULNERABILITY INTELLIGENCE

CVE-2020-0473

CVSS score4.6 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2020-12-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical possession of the device to transfer files to it over Bluetooth, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160691486

Weakness classification

  • nvd@nist.gov: CWE-863

Primary references