CVE-2020-0122: Medium severity Google Android vulnerability
In the permission declaration for com.google.android.providers.gsf.permission.WRITEGSERVICES in AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in 8.0:2020-07-01 - Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in 8.1:2020-07-01 - Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in 9:2020-07-01 - Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in 10:2020-07-01
Event History
Frequently Asked Questions
What is the severity of CVE-2020-0122?
CVE-2020-0122 is classified as a medium severity vulnerability that could lead to local privilege escalation.
How do I fix CVE-2020-0122?
The mitigation for CVE-2020-0122 involves updating affected Android versions to the latest security patch provided by Google.
Which versions of Android are affected by CVE-2020-0122?
CVE-2020-0122 affects Android versions 8.0, 8.1, 9.0, and 10.0.
Is user interaction required to exploit CVE-2020-0122?
No, user interaction is not needed to exploit CVE-2020-0122.
What type of vulnerability is CVE-2020-0122?
CVE-2020-0122 is a permissions bypass vulnerability that allows for local escalation of privileges.