CVE-2020-0009
In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
- Affected products
- Android Kernel
- Google Android
- All versions
- CVSS 3.1
- 5.5 MEDIUM
- EPSS
- 0.7% (50th percentile)
- Weakness
- CWE-276
- NVD status
- Modified
- Published
- 2020-01-08
CVE-2020-0009 at NVD
5 known exploits for CVE-2020-0009
Proof-of-concept code and exploit modules indexed by Sploitus
Android - ashmem Readonly Bypasses via remap_file_pages() and ASHMEM_UNPIN Exploit
WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM Exploit
Android - ashmem Readonly Bypasses via remap_file_pages() and ASHMEM_UNPIN
Android ashmem Read-Only Bypasses Exploit
Android ashmem Read-Only Bypasses