CVE-2020-0415
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed.
Risk Assessment
The organization may be exposed to the disclosure of sensitive contact data, potentially leading to user privacy violations.
Recommendation
It is recommended to update the Android system to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in SystemUI
See all- CVE-2017-5350High
Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling.
- CVE-2016-9277High
Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors involving APIs and an activity that computes an out-of-bounds array index.
- CVE-2016-7160High
A vulnerability on Samsung Mobile M (6.0) devices exists due to improper restriction of external access to SystemUI activities, leading to a SystemUI crash and device restart.
- CVE-2015-6621High
SystemUI in Android 5.x before version 5.1.1 LMY48Z and 6.0 before December 1, 2015, allows attackers to gain privileges via a crafted application, enabling access to Signature or SignatureOrSystem levels.
- CVE-2026-21100High
Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Original NVD description (English source)
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795
Vulnerability data from NVD (NIST) · CISA KEV · EPSS