Skip to content
OpenAdvisories
Unscored CVE-2020-0408 EUVD-2020-1910GHSA-vqvh-6p54-wvq9

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privi…

Published Oct 14, 2020 · Updated Aug 4, 2024 · Assigned by google_android

Description

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-156999009

Affected products

VendorProductAffectedFixed
— Android Android-11 Android-8.0 Android-8.1 Android-9 Android-10 —

References