CVE-2020-0403

MEDIUM

Android - Local Privilege Escalation in FPC TrustZone Fingerprint App

Title source: llm
STIX 2.1

Description

In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privilege in the TEE, with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-131252923

References (1)

Core 1
Core References

Scores

CVSS v3 6.7
EPSS 0.0015
EPSS Percentile 4.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-269
Status published
Products (1)
google/android
Published Sep 17, 2020
Tracked Since Feb 18, 2026