CVE-2020-0314
Last modified
CVE-2020-0314 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additional execution privileges needed. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934920
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 11.0 |
References
- https://source.android.com/security/bulletin/android-11Vendor Advisory
- https://source.android.com/security/bulletin/android-11Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-0314?
How severe is CVE-2020-0314?
How do I fix CVE-2020-0314?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-0308In Window Manager, there is a possible permission bypass due…5.5
- CVE-2020-0309In the Bluetooth server, there is a possible out of bounds w…6.7
- CVE-2020-0310In Settings, there is a possible permission bypass due to an…5.5
- CVE-2020-0311In InputManagerService, there is a possible permission bypas…5.5
- CVE-2020-0312In Battery Saver, there is a possible permission bypass due …5.5
- CVE-2020-0313In NotificationManagerService, there is a possible permissio…5.5
- CVE-2020-0315In Zen Mode, there is a possible permission bypass due to an…5.5
- CVE-2020-0316In Telephony, there is a missing permission check. This coul…5.5
- CVE-2020-0317In UsageStatsManager, there is a possible access to protecte…5.5
- CVE-2020-0318In the System UI, there is a possible system crash due to an…5.5
- CVE-2020-0319In NFC, there is a possible out of bounds write due to a mis…7.8
- CVE-2020-0320In libstagefright, there is a possible resource exhaustion d…6.5
Are you affected by CVE-2020-0314?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
