CVE-2020-0082 PoC — Google Android Framework 代码问题漏洞

Source

https://github.com/0x742/CVE-2020-0082-ExternalVibration

Associated Vulnerability

Title:Google Android Framework 代码问题漏洞 (CVE-2020-0082)
Description:In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140417434

Description

This repo contains a proof-of-concept for 📱🚀👑⚡, a deserialization vuln for local escalation of privilege to system_server in Android 10. This proof-of-concept only activates a privileged intent.

File Snapshot


 [4.0K]  /data/pocs/db3956aaf03a7240f0cdc6529aa9ca0cfdc3f4ee
├── [4.0K]  app
│   ├── [ 933]  build.gradle
│   ├── [ 750]  proguard-rules.pro
│   └── [4.0K]  src
│       ├── [4.0K]  androidTest
│       │   └── [4.0K]  java
│       │       └── [4.0K]  com
│       │           └── [4.0K]  expl
│       │               └── [4.0K]  cve_2020_0082
│       │                   └── [ 758]  ExampleInstrumentedTest.java
│       ├── [4.0K]  main
│       │   ├── [1.1K]  AndroidManifest.xml
│       │   ├── [4.0K]  java
│       │   │   └── [4.0K]  com
│       │   │       └── [4.0K]  expl
│       │   │           └── [4.0K]  cve_2020_0082
│       │   │               ├── [6.2K]  AuthService.java
│       │   │               └── [4.5K]  MainActivity.java
│       │   └── [4.0K]  res
│       │       ├── [4.0K]  drawable
│       │       │   └── [5.5K]  ic_launcher_background.xml
│       │       ├── [4.0K]  drawable-v24
│       │       │   └── [1.7K]  ic_launcher_foreground.xml
│       │       ├── [4.0K]  layout
│       │       │   └── [1.2K]  activity_main.xml
│       │       ├── [4.0K]  mipmap-anydpi-v26
│       │       │   ├── [ 272]  ic_launcher_round.xml
│       │       │   └── [ 272]  ic_launcher.xml
│       │       ├── [4.0K]  mipmap-hdpi
│       │       │   ├── [3.5K]  ic_launcher.png
│       │       │   └── [5.2K]  ic_launcher_round.png
│       │       ├── [4.0K]  mipmap-mdpi
│       │       │   ├── [2.6K]  ic_launcher.png
│       │       │   └── [3.3K]  ic_launcher_round.png
│       │       ├── [4.0K]  mipmap-xhdpi
│       │       │   ├── [4.8K]  ic_launcher.png
│       │       │   └── [7.3K]  ic_launcher_round.png
│       │       ├── [4.0K]  mipmap-xxhdpi
│       │       │   ├── [7.7K]  ic_launcher.png
│       │       │   └── [ 12K]  ic_launcher_round.png
│       │       ├── [4.0K]  mipmap-xxxhdpi
│       │       │   ├── [ 10K]  ic_launcher.png
│       │       │   └── [ 16K]  ic_launcher_round.png
│       │       ├── [4.0K]  values
│       │       │   ├── [ 207]  colors.xml
│       │       │   ├── [  75]  strings.xml
│       │       │   └── [ 381]  styles.xml
│       │       └── [4.0K]  xml
│       │           └── [ 209]  authenticator.xml
│       └── [4.0K]  test
│           └── [4.0K]  java
│               └── [4.0K]  com
│                   └── [4.0K]  expl
│                       └── [4.0K]  cve_2020_0082
│                           └── [ 383]  ExampleUnitTest.java
├── [ 530]  build.gradle
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 53K]  gradle-wrapper.jar
│       └── [ 232]  gradle-wrapper.properties
├── [1.0K]  gradle.properties
├── [5.2K]  gradlew
├── [2.2K]  gradlew.bat
├── [1.7K]  README.MD
└── [  49]  settings.gradle

31 directories, 34 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!