CVE-2020-0256 PUBLISHED

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864

EPSS 0.06% · 18.4th percentile

Risk Scores

EPSS Score
0.06%
18.4th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSgdisk0.8.8-1ubuntu0.1, 0.8.7-1, 0.8.8-1build1
Ubuntu:20.04:LTSgdisk1.0.4-3, 1.0.5-1, 0
Ubuntu:22.04:LTSgdisk1.0.8-4build1, 0, 1.0.8-1
Ubuntu:Pro:16.04:LTSgdisk1.0.0-3, 0, 1.0.1-1build1
Ubuntu:18.04:LTSgdisk0, 1.0.1-1build1, 1.0.3-1

Timeline

References

Open in Interactive Console →