ghsa-86qf-5646-chg9
Vulnerability from github
Published
2022-05-24 17:25
Modified
2022-05-24 17:25
Details
In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968
{ "affected": [], "aliases": [ "CVE-2020-0257" ], "database_specific": { "cwe_ids": [ "CWE-269" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2020-08-11T20:15:00Z", "severity": "HIGH" }, "details": "In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968", "id": "GHSA-86qf-5646-chg9", "modified": "2022-05-24T17:25:16Z", "published": "2022-05-24T17:25:16Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0257" }, { "type": "WEB", "url": "https://source.android.com/security/bulletin/2020-08-01" } ], "schema_version": "1.4.0", "severity": [] }
Loading...