CVE-2020-0081: Double Free

Published Apr 6, 2020

Updated

In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144028297

Affected Software

6 affected components

Google Android

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

fedoraproject fedora=32

Event History

Apr 6, 2020

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Apr 17, 2020

CVE Published

via MITRE·06:19 PM

Data Sourced

via MITRE·06:19 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0081?

CVE-2020-0081 has a high severity due to its potential for local privilege escalation.

How do I fix CVE-2020-0081?

To fix CVE-2020-0081, update your Android system to the latest version provided in the security updates.

What systems are affected by CVE-2020-0081?

CVE-2020-0081 affects Android versions 8.0, 8.1, 9.0, and 10.0, as well as Fedora 32.

What type of vulnerability is CVE-2020-0081?

CVE-2020-0081 is classified as a memory corruption vulnerability due to a double free.

Can CVE-2020-0081 be exploited without user interaction?

Yes, CVE-2020-0081 can be exploited without any user interaction required.