CVE-2020-0298

In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129266

• CWE-862

• https://source.android.com/security/bulletin/android-11Vendor Advisory
• https://source.android.com/security/bulletin/android-11Vendor Advisory

Published

Sep 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0292In Bluetooth, there is a possible out of bounds read due to …4.4
• CVE-2020-0293In Java network APIs, there is possible access to sensitive …5.5
• CVE-2020-0294In bindWallpaperComponentLocked of WallpaperManagerService.j…5.5
• CVE-2020-0295In Telecom, there is a possible permission bypass due to an …5.5
• CVE-2020-0296In ADB server and USB server, there is a possible permission…5.5
• CVE-2020-0297In devicepolicy service, there is a possible permission bypa…5.5
• CVE-2020-0299In Bluetooth, there is a possible spoofing of bluetooth devi…7.8
• CVE-2020-0300In NFC, there is a possible out of bounds read due to uninit…7.5
• CVE-2020-0301In libstagefright, there is a possible resource exhaustion d…6.5
• CVE-2020-0302In Settings, there is a possible permission bypass due to an…5.5
• CVE-2020-0303In the Media extractor, there is a possible use after free d…8.8
• CVE-2020-0304In Settings, there is a possible permission bypass due to an…5.5