CVE-2020-0415
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed.
Risk Assessment
The organization may be exposed to the disclosure of sensitive contact data, potentially leading to user privacy violations.
Recommendation
It is recommended to update the Android system to the latest version to minimize the risk associated with this vulnerability.
Original NVD description (English source)
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795