CVE-2020-0271

In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144507081

• CWE-1188

• https://source.android.com/security/bulletin/android-11Vendor Advisory
• https://source.android.com/security/bulletin/android-11Vendor Advisory

Published

Sep 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0265In Telephony, there are possible leaks of sensitive data due…5.5
• CVE-2020-0266In factory reset protection, there is a possible FRP bypass …7.8
• CVE-2020-0267In WindowManager, there is a possible launch of an unexpecte…7.8
• CVE-2020-0268In NFC, there is a possible use-after-free due to a race con…6.4
• CVE-2020-0269In Android Auto Settings, there is a possible permission byp…5.5
• CVE-2020-0270In tremolo, there is a possible out of bounds read due to a …6.5
• CVE-2020-0272In libhwbinder, there is a possible information disclosure d…4.4
• CVE-2020-0273In hwservicemanager, there is a possible out of bounds write…7.8
• CVE-2020-0274In the OMX parser, there is a possible information disclosur…5.5
• CVE-2020-0275In MediaProvider, there is a possible way to access ContentR…7.8
• CVE-2020-0276In Telephony, there is a possible permission bypass due to a…5.5
• CVE-2020-0277In NetworkPolicyManagerService, there is a possible permissi…7.8