CVE-2020-0382 - In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exceptio

CVE-2020-0382

Summary

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488

References

https://source.android.com/security/bulletin/2020-09-01

Vulnerable Configurations

cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 21-07-2021 - 11:39)
Impact:
Exploitability:

CWE

CWE-754

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

misc

https://source.android.com/security/bulletin/2020-09-01

Last major update

21-07-2021 - 11:39

Published

17-09-2020 - 16:15

Last modified

21-07-2021 - 11:39