CVE-2020-0017

Published Feb 13, 2020 CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Description
In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-123232892

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-1525 In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-123232892
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
google_android
Published
Updated
Aug 4, 2024, 5:47 AM
Reserved
Oct 17, 2019, 12:00 AM
Status
Modified
Published
Feb 13, 2020, 3:15 PM
Modified
Jun 17, 2026, 2:44 AM