Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-0009. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates two methods to bypass read-only restrictions on Android's ashmem driver. The first method uses remap_file_pages() to gain write access via mprotect(), while the second abuses ASHMEM_UNPIN to zero out memory pages.
Description
In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
Exploits (1)
This exploit demonstrates two methods to bypass read-only restrictions on Android's ashmem driver. The first method uses remap_file_pages() to gain write access via mprotect(), while the second abuses ASHMEM_UNPIN to zero out memory pages.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N