CVE-2020-0239

In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to a permissions bypass. This could lead to local information disclosure from a file eg. a photo containing location metadata with no additional execution privileges needed. User...

CVE-2020-0239: Missing Authorization

In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to a permissions bypass. This could lead to local information disclosure from a file eg. a photo containing location metadata with no additional execution privileges needed. User...

PT-2020-11594

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-10 Description In the getDocumentMetadata function of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to a permissions bypass. This could lead to local...