CVE-2020-0108

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Exploit for Improper Handling of Exceptional Conditions in Google Android

ServiceCheater CVE-2020-0113 & CVE-2020-0108 Analysis o...

CVE-2020-0108

CVE-2020-0108 is a local elevation-of-privilege in Google Android. In ServiceRecord.java, a failure to handle an exception in postNotification can bypass foreground service restrictions, allowing a malicious local app to run at elevated privileges without user interaction. Affected Android versio...