CVE-2020-0336

Опубликовано: 17 сент. 2020

Источник: nvd

CVSS3: 6.7

CVSS2: 4.6

EPSS Низкий

Описание

In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444

Ссылки

https://source.android.com/security/bulletin/android-11
Vendor Advisory
https://source.android.com/security/bulletin/android-11
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 3%

0.00016

Низкий

6.7 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости