CVE-2020-0265

In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150155839

• CWE-862

• https://source.android.com/security/bulletin/android-11Vendor Advisory
• https://source.android.com/security/bulletin/android-11Vendor Advisory

Published

Sep 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0259In android_verity_ctr of dm-android-verity.c, there is a pos…7.8
• CVE-2020-0260There is a possible out of bounds read due to an incorrect b…9.1
• CVE-2020-0261In C2 flame devices, there is a possible bypass of seccomp d…7.8
• CVE-2020-0262In WiFi tethering, there is a possible attacker controlled i…7.8
• CVE-2020-0263In the Accessibility service, there is a possible permission…5.5
• CVE-2020-0264In libstagefright, there is a possible out of bounds write d…8.8
• CVE-2020-0266In factory reset protection, there is a possible FRP bypass …7.8
• CVE-2020-0267In WindowManager, there is a possible launch of an unexpecte…7.8
• CVE-2020-0268In NFC, there is a possible use-after-free due to a race con…6.4
• CVE-2020-0269In Android Auto Settings, there is a possible permission byp…5.5
• CVE-2020-0270In tremolo, there is a possible out of bounds read due to a …6.5
• CVE-2020-0271In the Settings app, there is an insecure default value. Thi…7.3