{"id":"ASB-A-155648639","details":"In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing contact lists with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-155648639","CVE-2020-0394"],"modified":"2026-04-17T15:55:28.020024Z","published":"2020-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-09-01"}]}],"versions":["8.0"],"ecosystem_specific":{"spl":"2020-09-01","vanir_signatures":[{"target":{"file":"src/com/android/settings/bluetooth/BluetoothPairingDialog.java"},"id":"ASB-A-155648639-4ef404c8","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["3187232592425814798170242992126179054","200689881885266226857086265806910835767","154729374020362673883941306015094027664","203051173170714291080127555135759847274","58063598350332370326758486265581278590","142251778555814498814410223942669123035","26443495149634102669487743541124431935"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407","signature_version":"v1"},{"target":{"function":"onCreate","file":"src/com/android/settings/bluetooth/BluetoothPairingDialog.java"},"id":"ASB-A-155648639-ce3f4742","signature_type":"Function","deprecated":false,"digest":{"length":751,"function_hash":"49858146941061449718593128253940867238"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407","signature_version":"v1"}],"types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-155648639.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2020-09-01","vanir_signatures":[{"target":{"file":"src/com/android/settings/bluetooth/BluetoothPairingDialog.java"},"id":"ASB-A-155648639-41ef7c06","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["3187232592425814798170242992126179054","200689881885266226857086265806910835767","154729374020362673883941306015094027664","203051173170714291080127555135759847274","58063598350332370326758486265581278590","142251778555814498814410223942669123035","26443495149634102669487743541124431935"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407","signature_version":"v1"},{"target":{"function":"onCreate","file":"src/com/android/settings/bluetooth/BluetoothPairingDialog.java"},"id":"ASB-A-155648639-4aa15350","signature_type":"Function","deprecated":false,"digest":{"length":751,"function_hash":"49858146941061449718593128253940867238"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407","signature_version":"v1"}],"types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-155648639.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-09-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2020-09-01","vanir_signatures":[{"target":{"file":"src/com/android/settings/bluetooth/BluetoothPairingDialog.java"},"id":"ASB-A-155648639-3d2af61f","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["3187232592425814798170242992126179054","200689881885266226857086265806910835767","154729374020362673883941306015094027664","203051173170714291080127555135759847274","58063598350332370326758486265581278590","142251778555814498814410223942669123035","26443495149634102669487743541124431935"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407","signature_version":"v1"},{"target":{"function":"onCreate","file":"src/com/android/settings/bluetooth/BluetoothPairingDialog.java"},"id":"ASB-A-155648639-73955f5f","signature_type":"Function","deprecated":false,"digest":{"length":751,"function_hash":"49858146941061449718593128253940867238"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407","signature_version":"v1"}],"types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-155648639.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2020-09-01","vanir_signatures":[{"target":{"file":"src/com/android/settings/bluetooth/BluetoothPairingDialog.java"},"id":"ASB-A-155648639-499282d3","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["3187232592425814798170242992126179054","200689881885266226857086265806910835767","154729374020362673883941306015094027664","203051173170714291080127555135759847274","58063598350332370326758486265581278590","142251778555814498814410223942669123035","26443495149634102669487743541124431935"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407","signature_version":"v1"},{"target":{"function":"onCreate","file":"src/com/android/settings/bluetooth/BluetoothPairingDialog.java"},"id":"ASB-A-155648639-e94a79c8","signature_type":"Function","deprecated":false,"digest":{"length":751,"function_hash":"49858146941061449718593128253940867238"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407","signature_version":"v1"}],"types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f3afef8419de2910b03c3670ca25e63ac3c08407"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-155648639.json"}}],"schema_version":"1.7.5"}