{"id":"CVE-2020-0382","aliases":["A-152944488","ASB-A-152944488","EUVD-2020-1885","GHSA-w5h8-gj7c-wr5p"],"status":"published","title":"In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught...","description":"In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488","severity":{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00152,"percentile":0.04406,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-754","CWE-755"],"published":"2020-09-01T00:00:00Z","modified":"2026-11-04T16:48:29Z","fixes":[{"ecosystem":"Android","package":"platform/frameworks/base","fixed_in":["10:2020-09-01"],"sources":["osv"]},{"ecosystem":"Android","package":"platform/frameworks/native","fixed_in":["10:2020-09-01"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":"platform/frameworks/base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"]},{"source":"osv","ecosystem":"Android","package":"platform/frameworks/native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/2020-09-01","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0382"},{"url":"https://github.com/advisories/GHSA-w5h8-gj7c-wr5p"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/a898d1198050c40b73f1467ea5adaf881f3d7961","tags":["fix"]},{"url":"https://android.googlesource.com/platform/frameworks/native/+/90f8249030e02080e937eeed12fc8c8c692bbc64","tags":["fix"]}],"sources":{"cve":[{"id":"CVE-2020-0382","description":"In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488","status":"published","published":"2020-09-17T15:40:42Z","modified":"2024-08-04T06:02:51.293Z","updated_at":"2026-11-02T14:35:59.763887Z"}],"euvd":[{"id":"EUVD-2020-1885","description":"In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488","status":"published","published":"2020-09-17T15:40:42Z","modified":"2024-08-04T06:02:51Z","updated_at":"2026-11-03T03:08:20.23328Z"}],"ghsa":[{"id":"GHSA-w5h8-gj7c-wr5p","title":"In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught...","description":"In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488","status":"published","published":"2022-05-24T17:28:46Z","modified":"2023-01-29T05:04:35Z","cwes":["CWE-754"],"updated_at":"2026-11-02T14:45:35.654176Z"}],"nvd":[{"id":"CVE-2020-0382","description":"In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488","status":"published","published":"2020-09-17T16:15:12.99Z","modified":"2026-06-17T02:45:42.903Z","cvss":[{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:06:15.83396Z"}],"osv":[{"id":"ASB-A-152944488","description":"In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2020-09-01T00:00:00Z","modified":"2026-11-09T16:40:10.884737887Z","updated_at":"2026-11-09T17:04:22.742827Z"}]}}