CVE-2020-27025

In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156008365

• https://source.android.com/security/bulletin/pixel/2020-12-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2020-12-01Vendor Advisory

Published

Dec 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27019Trend Micro InterScan Messaging Security Virtual Appliance (…5.5
• CVE-2020-2702Vulnerability in the Oracle VM VirtualBox product of Oracle …7.5
• CVE-2020-27020Password generator feature in Kaspersky Password Manager was…7.5
• CVE-2020-27021In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a …4.4
• CVE-2020-27023In setErrorPlaybackState of BluetoothMediaBrowserService.jav…4.4
• CVE-2020-27024In smp_br_state_machine_event of smp_br_main.cc, there is a …7.5
• CVE-2020-27026During boot, the device unlock interface behaves differently…5.5
• CVE-2020-27027In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a poss…5.5
• CVE-2020-27028In filter_incoming_event of hci_layer.cc, there is a possibl…4.4
• CVE-2020-27029In TextView of TextView.java, there is a possible app hang d…6.5
• CVE-2020-2703Vulnerability in the Oracle VM VirtualBox product of Oracle …6.5
• CVE-2020-27030In onCreate of HandleApiCalls.java, there is a possible perm…7.8