ZeroDay Findings
Sign inSign up

Findings

CVE-2020-0338

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass.

Published Jan 1, 2022 · updated Oct 14, 2026

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 1, 2022 · Catalog

    Detected

    In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

  2. Oct 13, 2026 · Catalog

    Fix available

    Android platform/frameworks/base 9:0 → 9:2022-01-01

  3. Oct 13, 2026 · Catalog

    Fix available

    Android platform/frameworks/base 10:0 → 10:2022-01-01

  4. Oct 13, 2026 · OSV.dev

    Fix available

    platform/frameworks/base fixed in 9:2022-01-01; platform/frameworks/base fixed in 10:2022-01-01

  5. Oct 13, 2026 · OSV.dev

    Fix available

    platform/frameworks/base fixed in 9:2022-01-01

  6. Oct 13, 2026 · OSV.dev

    Fix available

    platform/frameworks/base fixed in 10:2022-01-01

  7. Oct 13, 2026 · Catalog

    Updated

    In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

  8. Oct 14, 2026 · OSV.dev

    Updated

    In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

Affected

  • Android platform/frameworks/base10:0 → 10:2022-01-01
  • Android platform/frameworks/base9:0 → 9:2022-01-01

Sources

References