Live › vulnerability › CVE-2020-0041
Go to dashboardAn out-of-bounds write in the Android kernel's binder_transaction function, caused by a bad bounds check, lets a local app escalate its privileges. It was seen exploited in the wild as part of a chain with CVE-2019-2215 and CVE-2020-0069.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Android Android Kernel | vendor | – | – |
Check the Android security patch level on the device (Settings > About phone) against the vendor bulletin; unknown for a fleet-wide command.
Install the Android security update that includes the fix for CVE-2020-0041, per vendor instructions.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2020-0041")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.