Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-0041

Опубликовано: 10 мар. 2020
Источник: nvd
CVSS3: 7.8
CVSS2: 7.2
EPSS Средний

Описание

In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%
0.23865
Средний

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20
CWE-20

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 6 лет назад

In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel

CVSS3: 7.8
debian
почти 6 лет назад

In binder_transaction of binder.c, there is a possible out of bounds w ...

CVSS3: 7.8
github
больше 3 лет назад

In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel

CVSS3: 7.8
fstec
около 6 лет назад

Уязвимость реализации функции binder_transaction() ядра операционных систем Android, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 96%
0.23865
Средний

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20
CWE-20