Skip to content
OpenAdvisories
Unscored CVE-2020-0387 EUVD-2020-1890GHSA-gc37-937w-g8g4

In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to lo…

Published Sep 17, 2020 · Updated Aug 4, 2024 · Assigned by google_android

Description

In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to local escalation of privilege and account hijacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-156046804

Affected products

VendorProductAffectedFixed
— Android Android kernel —

References