CVE-2020-0041
HIGH KEVAndroid - Local Privilege Escalation via Binder Transaction Bounds Check
Title source: llmExploitation Summary
CVE-2020-0041 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 5 public exploits from researchers including bluefrostsecurity, j4nn, jcalabres.
AI-analyzed exploit summary This repository contains a functional privilege escalation exploit for CVE-2020-0041, targeting Android devices. The exploit disables SELinux and spawns a root shell by leveraging a use-after-free vulnerability in the Binder driver.
Description
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel
Exploits (5)
This repository contains a functional privilege escalation exploit for CVE-2020-0041, targeting Android devices. The exploit disables SELinux and spawns a root shell by leveraging a use-after-free vulnerability in the Binder driver.
This repository contains a local privilege escalation (LPE) exploit for CVE-2020-0041, targeting a vulnerability in the Android Binder driver. The exploit leverages memory corruption to escalate privileges, with the code structured to interact with the Binder IPC mechanism.
This is a local privilege escalation exploit for CVE-2020-0041, targeting Pixel 3 devices running specific firmware. It disables SELinux and spawns a root shell by leveraging a use-after-free vulnerability in the Binder driver.
This is a local privilege escalation exploit for CVE-2020-0041, targeting Pixel 3a devices. It disables SELinux and spawns a root shell by leveraging a use-after-free vulnerability in the Binder driver.
This repository contains a proof-of-concept exploit for CVE-2020-0041, targeting a use-after-free vulnerability in the Android Binder driver. The code demonstrates binder operations and memory manipulation to trigger the vulnerability.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H