CVE-2020-0293

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-09-17 · updated 2026-06-17
Weakness: CWE-862

Description

In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation in Android versions: Android-11, Android ID: A-141455849

Affected products

Android: 11.0

References

https://source.android.com/security/bulletin/android-11
https://www.usenix.org/conference/usenixsecurity19/presentation/reardon
https://www.usenix.org/system/files/sec19-reardon.pdf
https://source.android.com/security/bulletin/android-11
https://www.usenix.org/conference/usenixsecurity19/presentation/reardon
https://www.usenix.org/system/files/sec19-reardon.pdf

Get alerted when CVE-2020-0293 or the next vulnerability affects your stack