ASB-A-146398979

vendorUSosv

view advisory published 2020-09-01Licence: per source

In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-0380US	critical9.8	2.82% (87th)	Exploit	2020-09-17
In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution pr…

references

External citations — patches, advisories, analysis.

https://android.googlesource.com/platform/system/bt/+/59c234a8fddda37147bb3fe1dd3b3a668828bcabFIX
https://source.android.com/security/bulletin/2020-09-01ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan