CVE-2020-0469

2020-12-1421:52:31

google_android

www.cve.org

locksettingsservice

logic error

denial of service

android-11

android id a-168692734

EPSS

Percentile

5.1%

JSON

In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168692734

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2020-12-01

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2020-0469