CVE-2020-0050

MEDIUM

Android 10 - Local Privilege Escalation via Improper Input Validation in nfa_hciu_send_msg

Title source: llm

Description

In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124521372

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://source.android.com/security/bulletin/pixel/2020-03-01

Scores

CVSS v3 6.7

EPSS 0.0016

EPSS Percentile 5.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20 CWE-787

Status published

Products (1)

google/android 10.0

Published Mar 10, 2020

Tracked Since Feb 18, 2026