Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-0380. PoCs published by ShaikUsaf.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-0380, a vulnerability in the Fluoride Bluetooth stack in Android. The exploit includes build scripts and source code to demonstrate the vulnerability, which involves a buffer overflow in the SBC decoder.
Description
In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146398979
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2020-0380, a vulnerability in the Fluoride Bluetooth stack in Android. The exploit includes build scripts and source code to demonstrate the vulnerability, which involves a buffer overflow in the SBC decoder.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H