ZeroDay Findings
Sign inSign up

Findings

CVE-2020-0108

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception.

Published Aug 1, 2020 · updated Oct 15, 2026

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 1, 2020 · OSV.dev

    Detected

    In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  2. Oct 15, 2026 · OSV.dev

    Fix available

    platform/frameworks/base fixed in 8.1:2020-08-01; platform/packages/apps/Settings fixed in 8.1:2020-08-01; platform/packages/services/Car fixed in 8.1:2020-08-01; platform/frameworks/base fixed in 9:2020-08-01

  3. Oct 15, 2026 · OSV.dev

    Fix available

    platform/frameworks/base fixed in 8.1:2020-08-01

  4. Oct 15, 2026 · OSV.dev

    Fix available

    platform/packages/apps/Settings fixed in 8.1:2020-08-01

  5. Oct 15, 2026 · OSV.dev

    Fix available

    platform/packages/services/Car fixed in 8.1:2020-08-01

  6. Oct 15, 2026 · OSV.dev

    Fix available

    platform/frameworks/base fixed in 9:2020-08-01

  7. Oct 15, 2026 · OSV.dev

    Fix available

    platform/packages/apps/Settings fixed in 9:2020-08-01

  8. Oct 15, 2026 · OSV.dev

    Fix available

    platform/packages/services/Car fixed in 9:2020-08-01

  9. Oct 15, 2026 · OSV.dev

    Fix available

    platform/frameworks/base fixed in 10:2020-08-01

  10. Oct 15, 2026 · OSV.dev

    Fix available

    platform/packages/apps/Settings fixed in 10:2020-08-01

  11. Oct 15, 2026 · OSV.dev

    Fix available

    platform/packages/services/Car fixed in 10:2020-08-01

  12. Oct 15, 2026 · OSV.dev

    Updated

    In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

  • Android platform/frameworks/base10:0 → 10:2020-08-01
  • Android platform/frameworks/base8.1:0 → 8.1:2020-08-01
  • Android platform/frameworks/base9:0 → 9:2020-08-01
  • Android platform/packages/apps/Settings10:0 → 10:2020-08-01
  • Android platform/packages/apps/Settings8.1:0 → 8.1:2020-08-01
  • Android platform/packages/apps/Settings9:0 → 9:2020-08-01
  • Android platform/packages/services/Car10:0 → 10:2020-08-01
  • Android platform/packages/services/Car8.1:0 → 8.1:2020-08-01
  • Android platform/packages/services/Car9:0 → 9:2020-08-01

Sources

References