CVE-2020-0136
HIGHAndroid 10 - Integer Overflow to Out-of-Bounds Write in Parcel.cpp
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-0136. PoCs published by Satheesh575555.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-0136, a vulnerability in the Android libhwbinder library. The exploit demonstrates how to trigger the vulnerability by manipulating binder transactions, potentially leading to privilege escalation.
Description
In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-120078455
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2020-0136, a vulnerability in the Android libhwbinder library. The exploit demonstrates how to trigger the vulnerability by manipulating binder transactions, potentially leading to privilege escalation.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H