{"id":"ASB-A-162383705", "published":"2020-10-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2020-0420", "A-162383705"], "details":"In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/native", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2020-10-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e"], "severity":"High", "spl":"2020-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["264256544272594088135784800754181967027", "123321243359111629203240604431797151766", "299461972247258878602252592219276638636", "177537507348629395715785302902244641155", "248769019103970512932940209630316618251", "162548355003454448619806427536862326406", "80286516831324134410496709583215525842"], "threshold":0.9}, "id":"ASB-A-162383705-68267dfd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e", "target":{"file":"services/gpuservice/GpuService.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["151156310192421868206646112945686981946", "120682369429687692599538525548468073902", "129346926263402459773606233107877525480", "218903388341399480723365307187486388248"], "threshold":0.9}, "id":"ASB-A-162383705-69577482", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e", "target":{"file":"services/gpuservice/GpuService.h"}}, {"deprecated":false, "digest":{"function_hash":"245590056813529783278785775162785530303", "length":79}, "id":"ASB-A-162383705-a1515927", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e", "target":{"file":"services/gpuservice/GpuService.cpp", "function":"GpuService::getUpdatableDriverPath"}}, {"deprecated":false, "digest":{"function_hash":"157993196880329670002802149241472168944", "length":100}, "id":"ASB-A-162383705-f29d0813", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e", "target":{"file":"services/gpuservice/GpuService.cpp", "function":"GpuService::setUpdatableDriverPath"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2020-10-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/native/+/e0984b06cb64acc83a54a60854ad03e65a3cea1e"}]}