CVE-2020-0108

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-140108616

• CWE-755

• https://source.android.com/security/bulletin/2020-08-01Vendor Advisory
• https://source.android.com/security/bulletin/2020-08-01Vendor Advisory

Published

Aug 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0102In GattServer::SendResponse of gatt_server.cc, there is a po…7.8
• CVE-2020-0103In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is…9.8
• CVE-2020-0104In onShowingStateChanged of KeyguardStateMonitor.java, there…5.5
• CVE-2020-0105In onKeyguardVisibilityChanged of key_store_service.cpp, the…7.8
• CVE-2020-0106In getCellLocation of PhoneInterfaceManager.java, there is a…5.5
• CVE-2020-0107In getUiccCardsInfo of PhoneInterfaceManager.java, there is …5.5
• CVE-2020-0109In simulatePackageSuspendBroadcast of NotificationManagerSer…7.8
• CVE-2020-0110In psi_write of psi.c, there is a possible out of bounds wri…7.8
• CVE-2020-0113In sendCaptureResult of Camera3OutputUtils.cpp, there is a p…5.5
• CVE-2020-0114In onCreateSliceProvider of KeyguardSliceProvider.java, ther…7.8
• CVE-2020-0115In verifyIntentFiltersIfNeeded of PackageManagerService.java…7.8
• CVE-2020-0116In checkSystemLocationAccess of LocationAccessPolicy.java, t…5.5