CVE-2020-0009: Medium severity Google Android vulnerability
Published Jan 6, 2020
·Updated
In calcvmmayflags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
Affected Software
3 affected components
Google Android
Google Android
Debian Linux=8.0
Remediation
Event History
Jan 6, 2020
CVE Published
via Android·12:00 AM
Jan 8, 2020
CVE Published
via MITRE·03:31 PM
Data Sourced
via MITRE·03:31 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-0009?
The severity of CVE-2020-0009 is high.
2
How does CVE-2020-0009 work?
CVE-2020-0009 allows an attacker to write to shared memory by bypassing permissions, which can lead to privilege escalation.
3
Is user interaction required for CVE-2020-0009 exploitation?
No, user interaction is not needed for CVE-2020-0009 exploitation.
4
What software is affected by CVE-2020-0009?
Google Android and Debian Linux (version 8.0) are affected by CVE-2020-0009.
5
How can CVE-2020-0009 be mitigated?
Apply the necessary security patches provided by the vendors.