PT-2020-11386 · Google · Android

Published 2020-02-13 · Updated 2021-07-21 · CVE-2020-0017

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10

Description The issue allows the primary user's dictionary to be visible to and modifiable by secondary users, potentially leading to local information disclosure. No additional execution privileges are needed, but user interaction is required for exploitation.

Recommendations For Android versions 8.0 through 10, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2020-0017

Affected Products

Android

References · 3

• https://source.android.com/security/bulletin/2020-02-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0017 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0017 · Vendor Advisory