CVE-2020-0258
Last modified
CVE-2020-0258 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application that is started next with no additional execution privileges needed. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application that is started next with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-157598956
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 10.0 |
References
- http://packetstormsecurity.com/files/158869/Android-App-Zygotes-Improper-Guarding.htmlThird Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2020-08-01Vendor Advisory
- http://packetstormsecurity.com/files/158869/Android-App-Zygotes-Improper-Guarding.htmlThird Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2020-08-01Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-0258?
How severe is CVE-2020-0258?
How do I fix CVE-2020-0258?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-0252There is a possible memory corruption due to a use after fre…9.8
- CVE-2020-0253There is a possible memory corruption due to a use after fre…9.8
- CVE-2020-0254There is a possible out of bounds read due to an incorrect b…7.5
- CVE-2020-0255Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-0256In LoadPartitionTable of gpt.cc, there is a possible out of …6.8
- CVE-2020-0257In SpecializeCommon of com_android_internal_os_Zygote.cpp, t…7.8
- CVE-2020-0259In android_verity_ctr of dm-android-verity.c, there is a pos…7.8
- CVE-2020-0260There is a possible out of bounds read due to an incorrect b…9.1
- CVE-2020-0261In C2 flame devices, there is a possible bypass of seccomp d…7.8
- CVE-2020-0262In WiFi tethering, there is a possible attacker controlled i…7.8
- CVE-2020-0263In the Accessibility service, there is a possible permission…5.5
- CVE-2020-0264In libstagefright, there is a possible out of bounds write d…8.8
Are you affected by CVE-2020-0258?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST