CVE-2020-0226
HIGHAndroid 10 - Local Privilege Escalation via Type Confusion in Client.cpp
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-0226. PoCs published by ShaikUsaf, Trinadh465.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-0226, a vulnerability in Android's frameworks/native component. The exploit appears to target a local privilege escalation (LPE) by manipulating system properties or services, as indicated by the modified source files in the `cmds` directory.
Description
In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150226994
Exploits (2)
This repository contains a proof-of-concept exploit for CVE-2020-0226, a vulnerability in Android's frameworks/native component. The exploit appears to target a local privilege escalation (LPE) by manipulating system properties or services, as indicated by the modified source files in the `cmds` directory.
This repository contains a proof-of-concept exploit for CVE-2020-0226, a vulnerability in Android's frameworks/native component. The exploit appears to target a privilege escalation or information disclosure flaw, leveraging native code to manipulate system properties or services.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H