CVE-2020-0034

In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770

• CWE-125

• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00048.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/11/msg00024.htmlMailing List, Third Party Advisory
• https://source.android.com/security/bulletin/2020-03-01Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00048.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/11/msg00024.htmlMailing List, Third Party Advisory
• https://source.android.com/security/bulletin/2020-03-01Vendor Advisory

Published

Mar 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0028In notifyNetworkTested and related functions of NetworkMonit…6.5
• CVE-2020-0029In the WifiConfigManager, there is a possible storage of loc…2.3
• CVE-2020-0030In binder_thread_release of binder.c, there is a possible us…7
• CVE-2020-0031In triggerAugmentedAutofillLocked and related functions of S…5
• CVE-2020-0032In ih264d_release_display_bufs of ih264d_utils.c, there is a…8.8
• CVE-2020-0033In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a pos…7.8
• CVE-2020-0035In query of TelephonyProvider.java, there is a possible acce…5.5
• CVE-2020-0036In hasPermissions of PermissionMonitor.java, there is a poss…7.8
• CVE-2020-0037In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible…7.5
• CVE-2020-0038In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible r…7.5
• CVE-2020-0039In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible r…7.5
• CVE-2020-0040Rejected reason: This CVE ID has been rejected or withdrawn …