CVE-2020-0096
HIGHAndroid 8.0-9 - Local Privilege Escalation via Confused Deputy in ActivityStartController
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-0096. PoCs published by tea9, liuyun201990, l1ackerronin.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-0096 (StrandHogg 2.0), demonstrating how an attacker can overlay malicious activities on top of legitimate apps by manipulating task affinity and intent flags. The PoC includes Android activities that exploit the vulnerability to hijack user interactions.
Description
In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-145669109
Exploits (3)
This repository contains a proof-of-concept exploit for CVE-2020-0096 (StrandHogg 2.0), demonstrating how an attacker can overlay malicious activities on top of legitimate apps by manipulating task affinity and intent flags. The PoC includes Android activities that exploit the vulnerability to hijack user interactions.
This repository contains a proof-of-concept exploit for CVE-2020-0096 (StrandHogg2), demonstrating a local privilege escalation vulnerability in Android's ActivityStartController. The exploit manipulates task affinity to hijack legitimate app activities.
This PoC demonstrates the StrandHogg vulnerability (CVE-2020-0096) by hijacking a target Android app's task via malicious intent manipulation. It exploits Android's task affinity to overlay malicious activities, potentially leading to credential theft or phishing.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H