CVE-2020-0031
Last modified
CVE-2020-0031 is a medium-severity vulnerability rated 5/10 on the CVSS scale. In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141703197
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 10.0 |
References
- https://source.android.com/security/bulletin/2020-03-01Vendor Advisory
- https://source.android.com/security/bulletin/2020-03-01Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-0031?
How severe is CVE-2020-0031?
How do I fix CVE-2020-0031?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-0025In deletePackageVersionedInternal of PackageManagerService.j…7.8
- CVE-2020-0026In Parcel::continueWrite of Parcel.cpp, there is possible me…7.8
- CVE-2020-0027In HidRawSensor::batch of HidRawSensor.cpp, there is a possi…7.8
- CVE-2020-0028In notifyNetworkTested and related functions of NetworkMonit…6.5
- CVE-2020-0029In the WifiConfigManager, there is a possible storage of loc…2.3
- CVE-2020-0030In binder_thread_release of binder.c, there is a possible us…7
- CVE-2020-0032In ih264d_release_display_bufs of ih264d_utils.c, there is a…8.8
- CVE-2020-0033In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a pos…7.8
- CVE-2020-0034In vp8_decode_frame of decodeframe.c, there is a possible ou…7.5
- CVE-2020-0035In query of TelephonyProvider.java, there is a possible acce…5.5
- CVE-2020-0036In hasPermissions of PermissionMonitor.java, there is a poss…7.8
- CVE-2020-0037In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible…7.5
Are you affected by CVE-2020-0031?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
