Every CVESearch/Get API key

CVE-2020-0464

In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure....

5.5 MediumFix available

CVE-2020-0464 is a medium vulnerability (CVSS 5.5) in Google Android, published December 1, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. Fixed in platform/frameworks/native 10:2020-12-01.

What does this mean?
Severity
5.5 MediumCVSS 3.1, NVD
Exploit chance
0.17%EPSS, 6th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
10:2020-12-01platform/frameworks/native +1 more

Description

In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150371903

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.17%Unchanged since Apr 14, 2021
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
platform/frameworks/native
Android
10:0 up to 10:2020-12-01, plus listed versions
10
10:2020-12-01
platform/system/netd
Android
10:0 up to 10:2020-12-01, plus listed versions
10
10:2020-12-01

What each source reports

NVD Score used5.5

In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150371903

Record
CVE-2020-0464
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-203
Updated
2026-11-02
CVE ListNo score

In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150371903

Record
CVE-2020-0464
Updated
2026-11-02
EUVDEUVD-2020-1963No score

In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150371903

Record
EUVD-2020-1963
Updated
2026-11-03
GitHub AdvisoriesGHSA-xx27-x5jh-mcrmNo score

In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure....

In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150371903

Record
GHSA-xx27-x5jh-mcrm
Weakness
CWE-203
Updated
2026-11-02
OSVASB-A-150371903No score

In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.

Record
ASB-A-150371903
Updated
2026-11-10

History

History
RecordedChangedSources
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open