CVE-2020-0432

HIGH

Android - Integer Overflow to Out-of-Bounds Write in skb_to_mamac

Title source: llm
STIX 2.1

Description

In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_misc
https://source.android.com/security/bulletin/pixel/2020-09-01
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 9.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190 CWE-787
Status published
Products (3)
google/android
opensuse/leap 15.1
opensuse/leap 15.2
Published Sep 17, 2020
Tracked Since Feb 18, 2026