CVE-2020-0041
HIGH KEVAndroid - Privilege Escalation
Title source: llmDescription
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel
Exploits (5)
nomisec
WORKING POC
253 stars
by bluefrostsecurity · local
https://github.com/bluefrostsecurity/CVE-2020-0041
nomisec
WORKING POC
5 stars
by vaginessa · local
https://github.com/vaginessa/CVE-2020-0041-Pixel-3a
Scores
CVSS v3
7.8
EPSS
0.2387
EPSS Percentile
96.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CISA KEV
2021-11-03
VulnCheck KEV
2021-10-28
InTheWild.io
2021-07-23
ENISA EUVD
EUVD-2020-1548
CWE
CWE-20
Status
published
Products (1)
google/android
Published
Mar 10, 2020
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026