CVE-2020-0256

Published: 11 August 2020

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864

Notes

Author	Note
sbeattie	requires device with a bad gpt table

Priority

CVSS 3 base score: 6.8

Status

Package	Release	Status
gdisk Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	groovy	Ignored (reached end-of-life)
	hirsute	Ignored (reached end-of-life)
	impish	Ignored (reached end-of-life)
	jammy	Needs triage
	precise	Does not exist
	trusty	Needs triage
	upstream	Released (1.0.6-1)
	xenial	Released (1.0.1-1ubuntu0.1~esm2)

References

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Security