CVE-2020-0114

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...

CVE-2020-0114

CVE-2020-0114 describes an Elevation of Privilege in Android where a flawed PendingIntent in KeyguardSliceProvider.java can enable local escalation to act with System UI privileges. Affected software is Android 10 (System/Framework components detailed in the June 2020 Android Security Bulletin). ...