CVE-2020-0004: Medium severity Google Android vulnerability

Published Jan 6, 2020

Updated

In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120847476

Affected Software

5 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2020-01-01

Event History

Jan 6, 2020

CVE Published

via Android·12:00 AM

Jan 8, 2020

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0004?

The severity of CVE-2020-0004 is classified as medium with a CVSS score of 5.5.

What is CVE-2020-0004 about?

CVE-2020-0004 describes a possible system UI crash in WallpaperManagerService.java due to an image exceeding the maximum texture size.

How do I fix CVE-2020-0004?

To fix CVE-2020-0004, apply the available patch provided by Google for affected Android versions.

What are the potential impacts of CVE-2020-0004?

The potential impact of CVE-2020-0004 is a local denial of service, which can disrupt device functionality.

Which versions of Android are affected by CVE-2020-0004?

CVE-2020-0004 affects Android versions 8 and later.