PT-2020-11640 · Google · Android

Published 2020-09-18 · Updated 2021-07-21 · CVE-2020-0286

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-11

Description In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For Android versions prior to Android-11, update to Android-11 or a later version to resolve the issue.

Fix

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2020-0286

Affected Products

Android

References · 3

• https://source.android.com/security/bulletin/android-11 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0286 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0286 · Vendor Advisory