CVE-2020-0479

Name of the Vulnerable Software and Affected Versions Android versions Android-11

Description The issue is related to a possible permissions bypass in the callUnchecked method of DocumentsProvider.java. This could lead to local escalation of privilege, allowing a malicious app to access files available to the DocumentProvider without user permission. No additional execution privileges are needed, but user interaction is required for exploitation.

Recommendations For Android version Android-11, consider restricting access to the DocumentsProvider until a patch is available. As a temporary workaround, avoid using the callUnchecked method in DocumentsProvider.java to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.