CVE-2020-0432

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-04337.8In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalatiCVE-2020-04347.8In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of pCVE-2020-04375.5In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. This could lead to locaCVE-2020-04387.8In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead toCVE-2020-04397.8In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This coulCVE-2020-04407.8In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permissiCVE-2020-04417.5In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to rCVE-2020-04427.5In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. This could lead to CVE-2020-04435.5In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of serviceCVE-2020-04447.8In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to locaCVE-2020-04459.8There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527CVE-2020-04469.8There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528
CVE-2020-0432: High severity, CVSS 7.8 | Vulnix