1. Home
  2. CVE Database
  3. CVE-2020-0484
MEDIUM · 6.7

CVE-2020-0484

In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User int...

Vulnerability Description

In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155769496

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
GoogleAndroid11.0

Related Weaknesses (CWE)

CWE-416CWE-787

References

FAQ

What is CVE-2020-0484?

CVE-2020-0484 is a vulnerability with a CVSS score of 6.7 (MEDIUM). In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User int...

How severe is CVE-2020-0484?

CVE-2020-0484 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-0484?

Check the references section above for vendor advisories and patch information. Affected products include: Google Android.