CVE-2020-0001

HIGH

Android <10 - Privilege Escalation

Title source: llm

Description

In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-140055304

Exploits (2)

nomisec WORKING POC 9 stars
by Zachinio · poc
https://github.com/Zachinio/CVE-2020-0001
github WORKING POC 8 stars
by codecat007 · cpoc
https://github.com/codecat007/cvehub/tree/main/android/CVE-2020-0001

References (1)

Scores

CVSS v3 7.8
EPSS 0.0010
EPSS Percentile 28.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

Status published

Affected Products (4)

google/android
google/android
google/android
google/android

Timeline

Published Jan 08, 2020
Tracked Since Feb 18, 2026