CVE-2020-0403

2020-09-1718:28:52

google_android

www.cve.org

trustzone fingerprint

local escalation

android kernel

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privilege in the TEE, with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-131252923

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android kernel"
      }
    ]
  }
]

References

source.android.com/security/bulletin/pixel/2020-09-01