CVE-2020-0485

Name of the Vulnerable Software and Affected Versions Android versions Android-11

Description In the areFunctionsSupported function of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For Android version Android-11, consider restricting access to the areFunctionsSupported function of UsbBackend.java to prevent local escalation of privilege until a patch is available. As a temporary workaround, disabling tethering functionality from guest accounts may also help minimize the risk of exploitation.