CVE-2020-0431

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to the kbd keycode function in keyboard.c, which is associated with an out of bounds write in memory due to a missing bounds check. This could lead to local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android kernel, consider applying a patch that includes bounds checking for the kbd keycode function to prevent out of bounds writes. As a temporary workaround, restrict access to sensitive areas of the system that could be exploited through this vulnerability until a patch is available.