CVE-2020-0177

In connect of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privilege to change network connection settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android...

CVE-2020-0085

In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege to activate tethering with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0085

CVE-2020-0085 affects Android 10 where an issue in PanService.java: setBluetoothTethering can bypass a permission check, enabling local escalation of privilege to activate tethering without extra execution privileges. The vulnerability is local, requires no user interaction, and could grant eleva...