CVEvulnerability
CVE-2020-0404
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-09-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-269
Description
In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel
Affected configurations
• google android
• oracle communications cloud native core binding support function 22.1.3
• oracle communications cloud native core network exposure function 22.1.1
• oracle communications cloud native core policy 22.2.0
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html Third Party Advisory
- https://source.android.com/security/bulletin/2020-09-01 Vendor Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html Third Party Advisory
- https://source.android.com/security/bulletin/2020-09-01 Vendor Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory