CVE-2020-0422
published 2020-10-14CVE-2020-0422: In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This…
PriorityP410low3.3CVSS 3.1
AVLACLPRLUINSUCLINAN
EPSS
0.17%
6.2th percentile
In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161718556
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | packages_apps_contacts | >= 10:0 < 10:2020-10-01 | 10:2020-10-01 |
| platform | packages_apps_contacts | >= 11:0 < 11:2020-10-01 | 11:2020-10-01 |
| platform | packages_apps_contacts | >= 8.0:0 < 8.0:2020-10-01 | 8.0:2020-10-01 |
| platform | packages_apps_contacts | >= 8.1:0 < 8.1:2020-10-01 | 8.1:2020-10-01 |
| platform | packages_apps_contacts | >= 9:0 < 9:2020-10-01 | 9:2020-10-01 |
CVSS provenance
nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j42v-w6hm-cc4x: In constructImportFailureNotification of NotificationImportExportListener
ghsa_unreviewed·2022-05-24
CVE-2020-0422 [LOW] CWE-922 GHSA-j42v-w6hm-cc4x: In constructImportFailureNotification of NotificationImportExportListener
In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161718556
OSV
CVE-2020-0422: In constructImportFailureNotification of NotificationImportExportListener
osv·2020-10-01
CVE-2020-0422 CVE-2020-0422: In constructImportFailureNotification of NotificationImportExportListener
In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.
Android
CVE-2020-0422: Android Security Bulletin 2020-10-01
CVE: CVE-2020-0422
Severity: HIGH
Type: ID
Affected AOSP versions: 8
vendor_android·2020-10-01·CVSS 3.3
CVE-2020-0422 [LOW] CVE-2020-0422: Android Security Bulletin 2020-10-01
CVE: CVE-2020-0422
Severity: HIGH
Type: ID
Affected AOSP versions: 8
Android Security Bulletin 2020-10-01
CVE: CVE-2020-0422
Severity: HIGH
Type: ID
Affected AOSP versions: 8.0, 8.1, 9, 10, 11
References: A-161718556
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-10-14
Published