CVEvulnerability

CVE-2020-0394

7.8 HIGH Published 2020-09-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-1021, CWE-1188

Description

In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing contact lists with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155648639

Affected configurations

• google android 8.0 • google android 8.1 • google android 9.0 • google android 10.0

Related

Weakness · CWE (2)

  • CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness
  • CWE-1188 Initialization of a Resource with an Insecure Default weakness

References