{"id":"CVE-2020-0257","aliases":["A-156741968","ASB-A-156741968","EUVD-2020-1760","GHSA-86qf-5646-chg9"],"status":"published","title":"In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to...","description":"In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00187,"percentile":0.08315,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269"],"published":"2020-08-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":"platform/frameworks/base","fixed_in":["10:2020-08-01"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":"platform/frameworks/base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-08-01"}]}],"versions":["10"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/2020-08-01","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0257"},{"url":"https://github.com/advisories/GHSA-86qf-5646-chg9"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/b26c7160cd1dfba9224ba12dc075ac3c658b18c3","tags":["fix"]}],"sources":{"cve":[{"id":"CVE-2020-0257","description":"In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968","status":"published","published":"2020-08-11T19:32:01Z","modified":"2024-08-04T05:55:12.601Z","updated_at":"2026-11-02T14:35:59.763887Z"}],"euvd":[{"id":"EUVD-2020-1760","description":"In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968","status":"published","published":"2020-08-11T19:32:01Z","modified":"2024-08-04T05:55:12Z","updated_at":"2026-11-03T03:08:20.772437Z"}],"ghsa":[{"id":"GHSA-86qf-5646-chg9","title":"In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to...","description":"In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968","status":"published","published":"2022-05-24T17:25:16Z","modified":"2023-01-29T05:03:42Z","cwes":["CWE-269"],"updated_at":"2026-11-02T14:45:22.75476Z"}],"nvd":[{"id":"CVE-2020-0257","description":"In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968","status":"published","published":"2020-08-11T20:15:12.837Z","modified":"2026-06-17T02:45:30.157Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:06:10.994748Z"}],"osv":[{"id":"ASB-A-156741968","description":"In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2020-08-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:14.18208Z"}]}}