CVE-2020-0063

In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143128911

• https://source.android.com/security/bulletin/pixel/2020-03-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2020-03-01Vendor Advisory

Published

Mar 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0057In btm_process_inq_results of btm_inq.cc, there is a possibl…5.5
• CVE-2020-0058In l2c_rcv_acl_data of l2c_main.cc, there is a possible out …4.4
• CVE-2020-0059In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_b…5.5
• CVE-2020-0060In query of SmsProvider.java and MmsSmsProvider.java, there …4.4
• CVE-2020-0061In Pixel Recorder, there is a possible permissions bypass al…5.5
• CVE-2020-0062In Euicc, there is a possible information disclosure due to …7.5
• CVE-2020-0064An improper authorization while processing the provisioning …5.5
• CVE-2020-0065An improper authorization in the receiver component of the A…5.5
• CVE-2020-0066In the netlink driver, there is a possible out of bounds wri…6.4
• CVE-2020-0067In f2fs_xattr_generic_list of xattr.c, there is a possible o…4.4
• CVE-2020-0068In crus_afe_get_param of msm-cirrus-playback.c, there is a p…4.4
• CVE-2020-0069In the ioctl handlers of the Mediatek Command Queue driver, …7.8