CVE-2020-0450: Medium severity Google Android vulnerability
In rwi93smformat of rwi93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/system/nfcto a version that resolves this vulnerability.Fixed in 11-next:2020-11-01 - Upgrade
Upgrade
android/platform/system/nfcto a version that resolves this vulnerability.Fixed in 8.0:2020-11-01 - Upgrade
Upgrade
android/platform/system/nfcto a version that resolves this vulnerability.Fixed in 8.1:2020-11-01 - Upgrade
Upgrade
android/platform/system/nfcto a version that resolves this vulnerability.Fixed in 9:2020-11-01 - Upgrade
Upgrade
android/platform/system/nfcto a version that resolves this vulnerability.Fixed in 10:2020-11-01 - Upgrade
Upgrade
android/platform/system/nfcto a version that resolves this vulnerability.Fixed in 11:2020-11-01
Event History
Frequently Asked Questions
What is the severity of CVE-2020-0450?
CVE-2020-0450 has been classified as a vulnerability that allows possible remote information disclosure due to an out of bounds read.
How do I fix CVE-2020-0450?
To fix CVE-2020-0450, update your Android device to the latest security patch provided by Google.
Which versions of Android are affected by CVE-2020-0450?
CVE-2020-0450 affects Android versions 8.0, 8.1, 9.0, 10.0, and 11.0.
Is user interaction required to exploit CVE-2020-0450?
Yes, user interaction is needed for the exploitation of CVE-2020-0450.
What kind of data could be exposed by CVE-2020-0450?
CVE-2020-0450 could lead to remote information disclosure, potentially exposing sensitive data over NFC.