CVE-2020-0346

In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled (which it is by default), with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002762

• CWE-190
• CWE-787

• https://source.android.com/security/bulletin/android-11Vendor Advisory
• https://source.android.com/security/bulletin/android-11Vendor Advisory

Published

Sep 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0340In libcodec2_soft_mp3dec, there is a possible information di…6.5
• CVE-2020-0341In DisplayManager, there is a possible permission bypass due…7.8
• CVE-2020-0342There is a possible out of bounds write due to an incorrect …9.8
• CVE-2020-0343In NetworkStatsService, there is a possible access to protec…5.5
• CVE-2020-0344In MediaProvider, there is a possible permissions bypass due…5.5
• CVE-2020-0345In DocumentsUI, there is a possible permission bypass due to…7.8
• CVE-2020-0347In iptables, there is a possible out of bounds write due to …6.7
• CVE-2020-0348In NFC, there is a possible out of bounds read due to a miss…4.9
• CVE-2020-0349In NFC, there is a possible out of bounds read due to a miss…4.4
• CVE-2020-0350In NFC, there is a possible out of bounds write due to a mis…6.7
• CVE-2020-0351In libstagefright, there is possible CPU exhaustion due to i…6.5
• CVE-2020-0352In MediaProvider, there is a possible permissions bypass due…5.5