CVE-2020-0380

In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146398979

• CWE-787

• https://source.android.com/security/bulletin/2020-09-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2020-09-01Patch, Vendor Advisory

Published

Sep 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0374In NFC, there is a possible permission bypass due to an unsa…7.8
• CVE-2020-0375In Telephony, there is a possible permission bypass due to a…7.8
• CVE-2020-0376There is a possible out of bounds read due to a missing boun…9.1
• CVE-2020-0377In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a p…7.5
• CVE-2020-0378In onWnmFrameReceived of PasspointManager.java, there is a m…5.5
• CVE-2020-0379In the Bluetooth service, there is a possible spoofing attac…5.7
• CVE-2020-0381In Parse_wave of eas_mdls.c, there is a possible out of boun…7.5
• CVE-2020-0382In RunInternal of dumpstate.cpp, there is a possible user co…2.3
• CVE-2020-0383In Parse_ins of eas_mdls.c, there is a possible out of bound…5.5
• CVE-2020-0384In Parse_art of eas_mdls.c, there is a possible out of bound…5.5
• CVE-2020-0385In Parse_insh of eas_mdls.c, there is a possible out of boun…5.5
• CVE-2020-0386In onCreate of RequestPermissionActivity.java, there is a po…5.5