CVE-2020-0418 PoC — Google Android 安全漏洞

Source

https://github.com/fernandodruszcz/CVE-2020-0418

Associated Vulnerability

Title:Google Android 安全漏洞 (CVE-2020-0418)
Description:In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153879813

Readme

# CVE-2020-0418

Projeto Android Studio para gerar as apks utilizadas para o exploit.

Para gerar a versão 1 da apk basta deixar comentadas as linhas indicadas no AndroidManifest.xml

Para gerar a versão 2 da apk basta descomentá-las

Demonstração em https://www.youtube.com/watch?v=3qPJoiuWhD0

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →