CVE-2020-0258
Summary
| CVE | CVE-2020-0258 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-08-11 20:15:00 UTC |
| Updated | 2022-05-03 13:00:00 UTC |
| Description | In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application that is started next with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-157598956 |
Risk And Classification
Problem Types: CWE-459
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Android App Zygotes Improper Guarding ≈ Packet Storm | MISC | packetstormsecurity.com | |
| Android Security Bulletin—August 2020 | Android Open Source Project | MISC | source.android.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.