CVE-2020-0041highunder attackCWE-20

CVE-2020-0041: high-severity vulnerability in Android

Published · Updated

Follow this CVE+ Monitor Android+ Monitor linux

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

76Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 7.8epss 3.2%
from disclosure to weapon21 days
Published on NVDMar 10
1st PoC+21d
CISA KEV+603d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A flaw in Android's binder communication system allows writing data beyond allocated memory boundaries due to improper validation. An attacker can exploit this locally to gain elevated privileges without needing user interaction or special permissions.

Technical detail

Out-of-bounds write vulnerability in binder_transaction() function caused by insufficient bounds checking during inter-process communication (IPC) buffer handling. Local attacker can trigger the vulnerability to achieve privilege escalation; no additional execution privileges or user interaction required.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · Android
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.