CVE-2020-0080 - In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying

Back Back to CVE browser

HIGH

In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying

Published Apr 17, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.50%

Description

In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144092031

Affected products

Vendor n/a Product Android Default
n/a
- Version
  Android-10
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Android

n/a

Version	Status	Constraints
Android-10	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1587
Advisory
https://source.android.com/security/bulletin/2020-04-01
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1587		Advisory
https://source.android.com/security/bulletin/2020-04-01		x_refsource_MISCVendor Advisory