CVE-2020-0084

In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143339775

• CWE-862

• https://source.android.com/security/bulletin/pixel/2020-03-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2020-03-01Vendor Advisory

Published

Mar 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0078In releaseSecureStops of DrmPlugin.cpp, there is a possible …7.8
• CVE-2020-0079In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out …7.8
• CVE-2020-0080In onOpActiveChanged and related methods of AppOpsController…7.8
• CVE-2020-0081In finalize of AssetManager.java, there is possible memory c…7.8
• CVE-2020-0082In ExternalVibration of ExternalVibration.java, there is a p…7.8
• CVE-2020-0083In setRequirePmfInternal of sta_network.cpp, there is a poss…7.5
• CVE-2020-0085In setBluetoothTethering of PanService.java, there is a poss…7.8
• CVE-2020-0086In readCString of Parcel.cpp, there is a possible out of bou…9.8
• CVE-2020-0087In getProcessPss of ActivityManagerService.java, there is a …5.5
• CVE-2020-0088In parseTrackFragmentRun of MPEG4Extractor.cpp, there is pos…6.5
• CVE-2020-0089In the audio server, there is a missing permission check. Th…7.8
• CVE-2020-0090An improper authorization in the receiver component of Email…5.5