PT-2020-5175 · Google+4 · Android Kernel+4
Published
2020-09-08
·
Updated
2021-05-18
·
CVE-2020-0431
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to the
kbd keycode function in keyboard.c, which is associated with an out of bounds write in memory due to a missing bounds check. This could lead to local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.Recommendations
For Android kernel, consider applying a patch that includes bounds checking for the
kbd keycode function to prevent out of bounds writes. As a temporary workaround, restrict access to sensitive areas of the system that could be exploited through this vulnerability until a patch is available.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Android Kernel
Centos
Red Hat
Suse