CVE-2020-0178

In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This could lead to local information disclosure of config flags with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143299398

• CWE-862

• https://source.android.com/security/bulletin/pixel/2020-06-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2020-06-01Patch, Vendor Advisory

Published

Jun 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0172In Parse_art of eas_mdls.c, there is possible resource exhau…6.5
• CVE-2020-0173In Parse_lins of eas_mdls.c, there is possible resource exha…6.5
• CVE-2020-0174In Parse_ptbl of eas_mdls.c, there is possible resource exha…6.5
• CVE-2020-0175In XMF_ReadNode of eas_xmf.c, there is possible resource exh…6.5
• CVE-2020-0176In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-…7.5
• CVE-2020-0177In connect() of PanService.java, there is a possible permiss…5.5
• CVE-2020-0179In doSendObjectInfo of MtpServer.cpp, there is a possible pa…7.8
• CVE-2020-0180In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a poss…6.5
• CVE-2020-0181In exif_data_load_data_thumbnail of exif-data.c, there is a …7.5
• CVE-2020-0182In exif_entry_get_value of exif-entry.c, there is a possible…6.5
• CVE-2020-0183In handleMessage of BluetoothManagerService, there is an inc…7.8
• CVE-2020-0184In ihevcd_ref_list() of ihevcd_ref_list.c, there is a possib…6.5