PT-2020-11770 · Google · Android
CVE-2020-0420
·
Published
2020-10-01
·
Updated
2021-07-21
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Android versions Android-11
Description
The issue is related to a missing permission check in the
setUpdatableDriverPath function of GpuService.cpp, which could lead to memory corruption. This might allow for local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.Recommendations
For Android version Android-11, apply the necessary patch or update to fix the missing permission check in the
setUpdatableDriverPath function of GpuService.cpp.Fix
Missing Authorization
Improper Locking
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Android