CVE-2020-0257

In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968

• https://source.android.com/security/bulletin/2020-08-01Vendor Advisory
• https://source.android.com/security/bulletin/2020-08-01Vendor Advisory

Published

Aug 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0251There is a possible out of bounds read due to an incorrect b…7.5
• CVE-2020-0252There is a possible memory corruption due to a use after fre…9.8
• CVE-2020-0253There is a possible memory corruption due to a use after fre…9.8
• CVE-2020-0254There is a possible out of bounds read due to an incorrect b…7.5
• CVE-2020-0255Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-0256In LoadPartitionTable of gpt.cc, there is a possible out of …6.8
• CVE-2020-0258In stopZygoteLocked of AppZygote.java, there is an insuffici…5.5
• CVE-2020-0259In android_verity_ctr of dm-android-verity.c, there is a pos…7.8
• CVE-2020-0260There is a possible out of bounds read due to an incorrect b…9.1
• CVE-2020-0261In C2 flame devices, there is a possible bypass of seccomp d…7.8
• CVE-2020-0262In WiFi tethering, there is a possible attacker controlled i…7.8
• CVE-2020-0263In the Accessibility service, there is a possible permission…5.5