Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.7

Android allows apps to gain system privileges

CVE-2020-0122 · published 6 years ago
Summary

An app can declare a certain permission in its manifest that may be incorrectly accepted, letting it run with system‑level rights. This means a malicious or compromised app could perform actions normally restricted to the operating system without the user noticing. Update the device to the latest security patches or remove untrusted apps to mitigate the risk.

What to do
  • Update google :unknown: to version 8.0:2020-07-01.
  • Update google :unknown: to version 8.1:2020-07-01.
  • Update google :unknown: to version 9:2020-07-01.
  • Update google :unknown: to version 10:2020-07-01.
Affected software
Ecosystem VendorProductAffected versions
Android google :unknown: >= 8.0:0, < 8.0:2020-07-01
>= 8.1:0, < 8.1:2020-07-01
>= 9:0, < 9:2020-07-01
>= 10:0, < 10:2020-07-01
Fix: upgrade to 8.0:2020-07-01
– google android 8.0
8.1
9.0
10.0
cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
Original advisory text
In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of ...
In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
References
Severity
6.7 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-276Incorrect Default Permissions
Timeline
Published1 Jul 2020
Updated3 Nov 2026
First seen17 Aug 2026
Sources
ASB-A-147247775 · OSV
CVE-2020-0122 · NVD
Track software like this
Free during beta