CVE-2020-0014: Medium severity Google Android vulnerability

Published Feb 3, 2020

Updated

It is possible for a malicious application to construct a TYPETOAST window manually and make that window clickable. This could lead to a local escalation of privilege with no additional execution privileges needed. User action is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-128674520

Affected Software

5 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android

Event History

Feb 3, 2020

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Feb 13, 2020

CVE Published

via MITRE·02:20 PM

Data Sourced

via MITRE·02:20 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0014?

CVE-2020-0014 has a medium severity rating of 5.5 on the CVSS scale.

How do I fix CVE-2020-0014?

To fix CVE-2020-0014, ensure that your device is running an updated version of Android that includes the security patch addressing this vulnerability.

What systems are affected by CVE-2020-0014?

CVE-2020-0014 affects devices running Android 8.0 and later versions if they have not been updated.

What is the risk associated with CVE-2020-0014?

The risk associated with CVE-2020-0014 is a local escalation of privilege through a malicious application without needing additional execution privileges.

Is user interaction required to exploit CVE-2020-0014?

Yes, user action is necessary for the exploitation of CVE-2020-0014.