VulnerabilityModified
CVE-2020-0404
In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause.
MEDIUM 5.5EPSS 0.23%
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-269
- Affected
- google/android · oracle/communications cloud native core binding support function · oracle/communications cloud native core network exposure function · oracle/communications cloud native core policy
- Source
- security@android.com
References
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.htmlThird Party Advisory
- https://source.android.com/security/bulletin/2020-09-01Vendor Advisory
- https://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.htmlThird Party Advisory
- https://source.android.com/security/bulletin/2020-09-01Vendor Advisory
- https://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.