Out-of-bounds write in Google Android - CVE-2020-0256

Vulnerability identifier: #VU45872

CSH Severity: Medium

CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-0256

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local non-authenticated attacker to execute arbitrary code.

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864

Google Android
Oracle Linux
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Ubuntu
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
gdisk (Red Hat package)
gdisk (Ubuntu package)
OpenShift Virtualization

Install update from vendor's website.

gdisk (Red Hat package) - addressed in versions 1.0.3-9.el8_6.1, 1.0.3-11.el8
gdisk (Ubuntu package) - update to 1.0.11ubuntu0.1~esm2
OpenShift Virtualization - addressed in versions 4.11.1, 4.12.0

• https://source.android.com/security/bulletin/2020-08-01

• Out-of-bounds write in Google Android
• Ubuntu update for gdisk
• Red Hat Enterprise Linux 8 update for gdisk
• Multiple vulnerabilities in OpenShift Virtualization 4.11
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 8.6 Extended Update Support update for gdisk