CVE-2020-0394

2020-09-1715:47:57

google_android

www.cve.org

bluetoothpairingdialog

tapjacking

local escalation

privilege

untrusted devices

contact lists

android-8.0

android-8.1

android-9

android-10

android-11

a-155648639

EPSS

Percentile

5.1%

JSON

In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing contact lists with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155648639

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-8.0 Android-8.1 Android-9 Android-10 Android-11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2020-09-01

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2020-0394