CVE-2020-0247: Medium severity Google Android vulnerability

Published Aug 3, 2020

Updated

In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1Android ID: A-156087409

Affected Software

4 affected components

Google Android=8.0

Google Android=8.1

Google Android=10.0

Google Android

Event History

Aug 3, 2020

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Aug 11, 2020

CVE Published

via MITRE·07:28 PM

Data Sourced

via MITRE·07:28 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0247?

CVE-2020-0247 has a severity level that indicates a local denial of service vulnerability due to an uncaught exception.

How do I fix CVE-2020-0247?

To fix CVE-2020-0247, update your Android device to the latest version provided by Google that includes the security patch.

What products are affected by CVE-2020-0247?

CVE-2020-0247 affects Google Android versions 8.0, 8.1, and 10.0.

What are the potential impacts of CVE-2020-0247?

The potential impacts of CVE-2020-0247 include a crash loop leading to local denial of service on affected Android devices.

Is user interaction required to exploit CVE-2020-0247?

Yes, user interaction is needed for exploitation of CVE-2020-0247.