CVE-2020-0388

In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0388

CVE-2020-0388 is an Android elevation-of-privilege issue in GnssVisibilityControl.java (createEmergencyLocationUserNotification) caused by an empty mutable PendingIntent. It enables a local attacker to bypass user interaction requirements and gain elevated privileges on Android-11/Android-10, wit...