Security Advisory

CVE-2020-0429

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-17 18:42:18
Last updated 2024-08-04 06:02:52
Assigner google_android
State PUBLISHED

Description

In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152735806