CVE-2020-0188
HIGHAndroid 10 - Local Privilege Escalation via PendingIntent Error in SettingsSliceProvider
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-0188. PoCs published by Trinadh465, ShaikUsaf, Satheesh575555.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-0188, targeting Android's Settings app. The exploit leverages a vulnerability in the ActivityPicker component to achieve arbitrary code execution.
Description
In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingIntent error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147355897
Exploits (3)
This repository contains a proof-of-concept exploit for CVE-2020-0188, targeting Android's Settings app. The exploit leverages a vulnerability in the ActivityPicker component to achieve arbitrary code execution.
This repository contains a proof-of-concept exploit for CVE-2020-0188, a vulnerability in Android's Settings app. The exploit appears to target a privilege escalation or arbitrary activity launch flaw, leveraging modified Android Settings components.
This repository contains a proof-of-concept exploit for CVE-2020-0188, a vulnerability in Android's Settings app. The exploit appears to target a privilege escalation or arbitrary activity launch flaw, leveraging modified Settings app components.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H