CVE-2020-0432
Summary
| CVE | CVE-2020-0432 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-09-17 19:15:00 UTC |
| Updated | 2022-04-28 18:33:00 UTC |
| Description | In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807 |
Risk And Classification
Problem Types: CWE-787 | CWE-190
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [security-announce] openSUSE-SU-2020:1655-1: important: Security update | SUSE | lists.opensuse.org | |
| Pixel Update Bulletin—September 2020 | Android Open Source Project | MISC | source.android.com | Patch, Vendor Advisory |
| [security-announce] openSUSE-SU-2020:1586-1: important: Security update | SUSE | lists.opensuse.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 750376 OpenSUSE Security Update for RT kernel (openSUSE-SU-2021:0242-1)