CVE-2020-0382

2020-09-1715:40:42

google_android

www.cve.org

dumpstate.cpp

information disclosure

bug report data

system execution privileges

android-11

android-10

user consent bypass

AI Score

3.6

Confidence

High

EPSS

Percentile

5.1%

JSON

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11 Android-10"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2020-09-01