CVE-2020-0081
published 2020-04-17CVE-2020-0081: In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.17%
6.9th percentile
In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144028297
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | fedora | — | — |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
vendor_redhat·2025-10-01·CVSS 5.5
CVE-2022-50430 [MEDIUM] CWE-820 kernel: mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
kernel: mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
In the Linux kernel, the following vulnerability has been resolved:
mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
vub300_enable_sdio_irq() works with mutex and need TASK_RUNNING here.
Ensure that we mark current as TASK_RUNNING for sleepable context.
[ 77.554641] do not call blocking ops when !TASK_RUNNING; state=1 set at [] sdio_irq_thread+0x17d/0x5b0
[ 77.554652] WARNING: CPU: 2 PID: 1983 at kernel/sched/core.c:9813 __might_sleep+0x116/0x160
[ 77.554905] CPU: 2 PID: 1983 Comm: ksdioirqd/mmc1 Tainted: G OE 6.1.0-rc5 #1
[ 77.554910] Hardware name: Intel(R) Client Systems NUC8i7BEH/NUC8BEB, BIOS BECFL357.86A.0081.2020.0504.1834 05/04/2020
[ 77.554912] RIP: 0010:__might_sleep+0x116/0x160
Android
CVE-2020-0081: Android Security Bulletin 2020-04-01
CVE: CVE-2020-0081
Severity: HIGH
Type: EoP
Affected AOSP versions: 8
vendor_android·2020-04-01·CVSS 7.8
CVE-2020-0081 [HIGH] CVE-2020-0081: Android Security Bulletin 2020-04-01
CVE: CVE-2020-0081
Severity: HIGH
Type: EoP
Affected AOSP versions: 8
Android Security Bulletin 2020-04-01
CVE: CVE-2020-0081
Severity: HIGH
Type: EoP
Affected AOSP versions: 8.0, 8.1, 9, 10
References: A-144028297
[2]
GHSA
GHSA-h593-gfrx-wwgq: In finalize of AssetManager
ghsa_unreviewed·2022-05-24
CVE-2020-0081 [HIGH] CWE-415 GHSA-h593-gfrx-wwgq: In finalize of AssetManager
In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144028297
No detection rules found.
No public exploits indexed.
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/https://source.android.com/security/bulletin/2020-04-01https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/https://source.android.com/security/bulletin/2020-04-01
2020-04-17
Published