CVE-2020-0326

In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146453119

• CWE-787
• CWE-908

• https://source.android.com/security/bulletin/android-11Vendor Advisory
• https://source.android.com/security/bulletin/android-11Vendor Advisory

Published

Sep 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0320In libstagefright, there is a possible resource exhaustion d…6.5
• CVE-2020-0321In the mp3 extractor, there is a possible out of bounds writ…8.8
• CVE-2020-0322In apexd, there is a possible out of bounds read due to a mi…4.4
• CVE-2020-0323In libavb, there is a possible out of bounds read due to a m…5.5
• CVE-2020-0324In libsonivox, there is a possible out of bounds read due to…6.5
• CVE-2020-0325In NFC, there is a missing bounds check. This could lead to …4.4
• CVE-2020-0327In core networking, there is a missing permission check. Thi…5.5
• CVE-2020-0328In the camera, there is a possible out of bounds read due to…4.4
• CVE-2020-0329In the OMX encoder, there is a possible out of bounds read d…5.5
• CVE-2020-0330In iorap, there is a possible memory corruption due to a use…6.7
• CVE-2020-0331In Settings, there is a possible permissions bypass. This co…5.5
• CVE-2020-0332In libstagefright, there is a possible dead loop due to an u…6.5