CVE-2020-0454

Summary: CVE-2020-0454 affects Android 9 (Android-9) via the ConnectivityService.java callCallbackForRequest, enabling a local attacker with LOW privileges to bypass a permission check and disclose the current SSID without user interaction. Exploitation is localized to the device; no remote acces...

PT-2020-11795

Name of the Vulnerable Software and Affected Versions Android version 9 Description In the callCallbackForRequest function of ConnectivityService.java, a missing permission check could lead to a permission bypass. This issue may result in local information disclosure of the current SSID, requirin...