CVE-2020-0375

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253476

• CWE-862

• https://source.android.com/security/bulletin/android-11Vendor Advisory
• https://source.android.com/security/bulletin/android-11Vendor Advisory

Published

Sep 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0369In libavb, there is a possible out of bounds write due to an…7.8
• CVE-2020-0370In libAACdec, there is a possible out of bounds read due to …6.5
• CVE-2020-0371There is a possible out of bounds read due to a missing boun…9.1
• CVE-2020-0372In ActivityManager, there is a possible access to protected …5.5
• CVE-2020-0373In SoundTriggerHwService, there is a possible out of bounds …4.7
• CVE-2020-0374In NFC, there is a possible permission bypass due to an unsa…7.8
• CVE-2020-0376There is a possible out of bounds read due to a missing boun…9.1
• CVE-2020-0377In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a p…7.5
• CVE-2020-0378In onWnmFrameReceived of PasspointManager.java, there is a m…5.5
• CVE-2020-0379In the Bluetooth service, there is a possible spoofing attac…5.7
• CVE-2020-0380In allocExcessBits of bitalloc.c, there is a possible out of…9.8
• CVE-2020-0381In Parse_wave of eas_mdls.c, there is a possible out of boun…7.5