CVE-2020-0421
published 2020-10-14CVE-2020-0421: In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.27%
18.0th percentile
In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161894517
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | system_core | >= 10:0 < 10:2020-10-01 | 10:2020-10-01 |
| platform | system_core | >= 11:0 < 11:2020-10-01 | 11:2020-10-01 |
| platform | system_core | >= 8.0:0 < 8.0:2020-10-01 | 8.0:2020-10-01 |
| platform | system_core | >= 8.1:0 < 8.1:2020-10-01 | 8.1:2020-10-01 |
| platform | system_core | >= 9:0 < 9:2020-10-01 | 9:2020-10-01 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-29fp-7w52-3694: In appendFormatV of String8
ghsa_unreviewed·2022-05-24
CVE-2020-0421 [HIGH] CWE-755 GHSA-29fp-7w52-3694: In appendFormatV of String8
In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161894517
OSV
CVE-2020-0421: In appendFormatV of String8
osv·2020-10-01
CVE-2020-0421 CVE-2020-0421: In appendFormatV of String8
In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Android
CVE-2020-0421: Android Security Bulletin 2020-10-01
CVE: CVE-2020-0421
Severity: HIGH
Type: EoP
Affected AOSP versions: 8
vendor_android·2020-10-01·CVSS 7.8
CVE-2020-0421 [HIGH] CVE-2020-0421: Android Security Bulletin 2020-10-01
CVE: CVE-2020-0421
Severity: HIGH
Type: EoP
Affected AOSP versions: 8
Android Security Bulletin 2020-10-01
CVE: CVE-2020-0421
Severity: HIGH
Type: EoP
Affected AOSP versions: 8.0, 8.1, 9, 10, 11
References: A-161894517
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-10-14
Published