CVE-2020-0227
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check.
Published Jul 1, 2020 · updated Oct 14, 2026
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User interaction is not needed for exploitation.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Jul 1, 2020 · Catalog
Detected
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User interaction is not needed for exploitation.
Oct 13, 2026 · Catalog
Fix available
Android platform/cts 8.0:0 → 8.0:2020-07-01
Oct 13, 2026 · Catalog
Fix available
Android platform/frameworks/base 8.0:0 → 8.0:2020-07-01
Oct 13, 2026 · Catalog
Fix available
Android platform/cts 8.1:0 → 8.1:2020-07-01
Oct 13, 2026 · Catalog
Fix available
Android platform/frameworks/base 8.1:0 → 8.1:2020-07-01
Oct 13, 2026 · Catalog
Fix available
Android platform/cts 9:0 → 9:2020-07-01
Oct 13, 2026 · Catalog
Fix available
Android platform/frameworks/base 9:0 → 9:2020-07-01
Oct 13, 2026 · Catalog
Fix available
Android platform/cts 10:0 → 10:2020-07-01
Oct 13, 2026 · Catalog
Fix available
Android platform/frameworks/base 10:0 → 10:2020-07-01
Oct 13, 2026 · OSV.dev
Fix available
platform/cts fixed in 8.0:2020-07-01; platform/frameworks/base fixed in 8.0:2020-07-01; platform/cts fixed in 8.1:2020-07-01; platform/frameworks/base fixed in 8.1:2020-07-01
Oct 13, 2026 · OSV.dev
Fix available
platform/cts fixed in 8.0:2020-07-01
Oct 13, 2026 · OSV.dev
Fix available
platform/frameworks/base fixed in 8.0:2020-07-01
Oct 13, 2026 · OSV.dev
Fix available
platform/cts fixed in 8.1:2020-07-01
Oct 13, 2026 · OSV.dev
Fix available
platform/frameworks/base fixed in 8.1:2020-07-01
Oct 13, 2026 · OSV.dev
Fix available
platform/cts fixed in 9:2020-07-01
Oct 13, 2026 · OSV.dev
Fix available
platform/frameworks/base fixed in 9:2020-07-01
Oct 13, 2026 · OSV.dev
Fix available
platform/cts fixed in 10:2020-07-01
Oct 13, 2026 · OSV.dev
Fix available
platform/frameworks/base fixed in 10:2020-07-01
Oct 13, 2026 · Catalog
Updated
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User interaction is not needed for exploitation.
Oct 14, 2026 · OSV.dev
Updated
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
- Android platform/cts10:0 → 10:2020-07-01
- Android platform/cts8.0:0 → 8.0:2020-07-01
- Android platform/cts8.1:0 → 8.1:2020-07-01
- Android platform/cts9:0 → 9:2020-07-01
- Android platform/frameworks/base10:0 → 10:2020-07-01
- Android platform/frameworks/base8.0:0 → 8.0:2020-07-01
- Android platform/frameworks/base8.1:0 → 8.1:2020-07-01
- Android platform/frameworks/base9:0 → 9:2020-07-01