{"id":"ASB-A-162383705","details":"In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-162383705","CVE-2020-0420"],"modified":"2026-04-24T15:37:38.793646Z","published":"2020-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-10-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e"}],"affected":[{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2020-10-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-162383705-68267dfd","target":{"file":"services/gpuservice/GpuService.cpp"},"digest":{"threshold":0.9,"line_hashes":["264256544272594088135784800754181967027","123321243359111629203240604431797151766","299461972247258878602252592219276638636","177537507348629395715785302902244641155","248769019103970512932940209630316618251","162548355003454448619806427536862326406","80286516831324134410496709583215525842"]},"source":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e"},{"signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-162383705-69577482","target":{"file":"services/gpuservice/GpuService.h"},"digest":{"threshold":0.9,"line_hashes":["151156310192421868206646112945686981946","120682369429687692599538525548468073902","129346926263402459773606233107877525480","218903388341399480723365307187486388248"]},"source":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e"},{"signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-162383705-a1515927","target":{"function":"GpuService::getUpdatableDriverPath","file":"services/gpuservice/GpuService.cpp"},"digest":{"length":79,"function_hash":"245590056813529783278785775162785530303"},"source":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e"},{"signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-162383705-f29d0813","target":{"function":"GpuService::setUpdatableDriverPath","file":"services/gpuservice/GpuService.cpp"},"digest":{"length":100,"function_hash":"157993196880329670002802149241472168944"},"source":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e"}],"fixes":["https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e"],"spl":"2020-10-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-162383705.json"}}],"schema_version":"1.7.5"}