CVE-2020-0394
HIGHAndroid - Tapjacking via BluetoothPairingDialog Insecure Default
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2020-0394. PoCs published by pazhanivel07, ShaikUsaf.
AI-analyzed exploit summary The repository contains source code files from the Android Settings app, specifically focusing on CVE-2020-0394. The code includes various classes and components, but no explicit exploit or proof-of-concept is present. The files appear to be part of a technical analysis or patch review.
Description
In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing contact lists with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155648639
Exploits (4)
The repository contains source code files from the Android Settings app, specifically focusing on CVE-2020-0394. The code includes various classes and components, but no explicit exploit or proof-of-concept is present. The files appear to be part of a technical analysis or patch review.
This repository contains a proof-of-concept exploit for CVE-2020-0394, a vulnerability in Android Settings. The exploit appears to target a privilege escalation or intent redirection flaw, likely involving the ActivityPicker component.
This repository contains a proof-of-concept exploit for CVE-2020-0394, a vulnerability in Android Settings. The exploit appears to target a privilege escalation or arbitrary activity launch flaw, leveraging intents and package manager interactions.
This repository contains a proof-of-concept exploit for CVE-2020-0394, targeting Android's Settings app. The exploit leverages a vulnerability in the ActivityPicker component to achieve arbitrary code execution.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H