CVE-2020-0403 - In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature

Back Back to CVE browser

MEDIUM

In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature

Published Sep 17, 2020

6.7

MEDIUM

CVSS 3.1

EPSS 0.15%

Description

In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privilege in the TEE, with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-131252923

Affected products

Vendor n/a Product Android Default
n/a
- Version
  Android kernel
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Android

n/a

Version	Status	Constraints
Android kernel	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1905
Advisory
https://source.android.com/security/bulletin/pixel/2020-09-01
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1905		Advisory
https://source.android.com/security/bulletin/pixel/2020-09-01		x_refsource_MISCVendor Advisory