CVE-2020-0497

In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661

• CWE-862

• https://source.android.com/security/bulletin/pixel/2020-12-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2020-12-01Vendor Advisory

Published

Dec 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0491In readBlock of MatroskaExtractor.cpp, there is a possible d…6.5
• CVE-2020-0492In BitstreamFillCache of bitstream.cpp, there is a possible …6.5
• CVE-2020-0493In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there i…5.5
• CVE-2020-0494In ih264d_parse_ave of ih264d_sei.c, there is a possible out…6.5
• CVE-2020-0495In decode_Huffman of JBig2_SddProc.cpp, there is a possible …5.5
• CVE-2020-0496In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp, th…5.5
• CVE-2020-0498In decode_packed_entry_number of codebook.c, there is a poss…5.5
• CVE-2020-0499In FLAC__bitreader_read_rice_signed_block of bitreader.c, th…4.3
• CVE-2020-0500In startInputUncheckedLocked of InputMethodManager.java, the…5.5
• CVE-2020-0501Buffer overflow in Intel(R) Graphics Drivers before version …5.5
• CVE-2020-0502Improper access control in Intel(R) Graphics Drivers before …5.3
• CVE-2020-0503Improper access control in Intel(R) Graphics Drivers before …5.5