VDB

CVE-2020-11274

CVE-2020-11274 PUBLISHED

In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174302616

EPSS 0.25% · 48.0th percentile

Risk Scores

EPSS Score
0.25%
48.0th percentile

Affected Products

VendorProductVersions
n/aAndroidAndroid-11

Timeline

  • May 4, 2021 CVE Published
  • May 7, 2021 EPSS Score
  • Jul 10, 2021 EPSS Score
  • Sep 10, 2021 EPSS Score
  • Nov 11, 2021 EPSS Score
  • Jan 12, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 15, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 16, 2022 EPSS Score
  • Jul 18, 2022 EPSS Score
  • Sep 17, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›