
Cloud Vulnerability DB
A community-led vulnerabilities database
In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This vulnerability (CVE-2020-0431) was discovered in the Android kernel. The vulnerability could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. The issue was assigned Android ID A-144161459 (CVE Details).
The vulnerability exists in the kbd_keycode function of keyboard.c where a missing bounds check could allow an out of bounds write operation. This could potentially allow unauthorized memory access and manipulation (NVD).
The vulnerability could lead to local privilege escalation, allowing an attacker to gain elevated system privileges without requiring additional execution privileges. The attack does not require user interaction, making it particularly concerning from a security perspective (CVE Details).
The vulnerability can be exploited locally without requiring additional execution privileges or user interaction. No specific exploit code or evidence of exploitation in the wild has been publicly reported (NVD).
The vulnerability was addressed in the Android security bulletin of September 2020. Users should apply the security updates provided by their device manufacturers. Linux distributions have also released patches to address this vulnerability (Android Bulletin, OpenSUSE).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."