CVE-2020-0041

HIGH7.8⚠ KEVEPSS 23.9%

Android Kernel Out-of-Bounds Write Vulnerability

Published: 3/10/2020Modified: 4/28/2026Added to CISA KEV: 11/3/2021
Also known as:DEBIAN-CVE-2020-0041

Description

In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References (1)