CVE-2020-0045

In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0045

CVE-2020-0045 affects Android 10 framework components. The vulnerability is in StatsService::command where a race condition can cause memory corruption, enabling local escalation of privilege with System execution privileges required. Exploitation is described as local (AV:L, UI:N) with no user i...