CVE-2020-0239

In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to a permissions bypass. This could lead to local information disclosure from a file eg. a photo containing location metadata with no additional execution privileges needed. User...

CVE-2020-0239

CVE-2020-0239 affects the Android Framework (DocumentsContract.java) and describes a permissions bypass that can disclose location metadata from files (e.g., photos) via a local information disclosure flaw. The vulnerability is rooted in getDocumentMetadata, enabling a local attacker to access lo...