CVE-2020-0432

In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807

• CWE-190
• CWE-787

• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.htmlMailing List, Third Party Advisory
• https://source.android.com/security/bulletin/pixel/2020-09-01Patch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.htmlMailing List, Third Party Advisory
• https://source.android.com/security/bulletin/pixel/2020-09-01Patch, Vendor Advisory

Published

Sep 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-0426In SyncManager, there is a possible permission bypass due to…5.5
• CVE-2020-0427In create_pinctrl of core.c, there is a possible out of boun…5.5
• CVE-2020-0428In CamX code, there is a possible use after free due to a ra…6.4
• CVE-2020-0429In l2tp_session_delete and related functions of l2tp_core.c,…6.7
• CVE-2020-0430In skb_headlen of /include/linux/skbuff.h, there is a possib…7.8
• CVE-2020-0431In kbd_keycode of keyboard.c, there is a possible out of bou…6.7
• CVE-2020-0433In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a po…7.8
• CVE-2020-0434In Pixel's use of the Catpipe library, there is possible mem…7.8
• CVE-2020-0435Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-0436Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2020-0437In CellBroadcastReceiver's intent handlers, there is a possi…5.5
• CVE-2020-0438In the AIBinder_Class constructor of ibinder.cpp, there is a…7.8