PT-2020-11579 · Google · Android Kernel

Published 2020-05-14 · Updated 2021-07-21 · CVE-2020-0221

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android kernel

Description The Airbrush FW's scratch memory allocator in Android is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.

Recommendations For Android kernel, consider applying a patch or fix that addresses the numeric overflow issue in the Airbrush FW's scratch memory allocator to prevent improper memory access.

Fix

Weakness Enumeration

CWE-682

Related Identifiers

CVE-2020-0221

Affected Products

Android Kernel

References · 2

• https://source.android.com/security/bulletin/pixel/2020-05-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0221 · Security Note