CVE-2020-11828
Last modified
CVE-2020-11828 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the screenShot function to RGB value assignment, will not initialize the value is returned to the attackers, leading to values on the stack information leakage, the vulnerability can be used to bypass attackers ALSR.. EPSS estimates a 1.17% chance of exploitation in the next 30 days.
Description
In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the screenShot function to RGB value assignment, will not initialize the value is returned to the attackers, leading to values on the stack information leakage, the vulnerability can be used to bypass attackers ALSR.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oppo | Coloros | All versions |
References
- https://security.oppo.com/cn/noticedetails.html?noticeId=20201587348300033Third Party Advisory
- https://security.oppo.com/cn/noticedetails.html?noticeId=20201587348300033Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-11828?
How severe is CVE-2020-11828?
How do I fix CVE-2020-11828?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-11821In Rukovoditel 2.5.2, users' passwords and usernames are sto…5.3
- CVE-2020-11822In Rukovoditel 2.5.2, there is a stored XSS vulnerability on…6.1
- CVE-2020-11823In Dolibarr 10.0.6, if USER_LOGIN_FAILED is active, there is…5.4
- CVE-2020-11825In Dolibarr 10.0.6, forms are protected with a CSRF token ag…8.8
- CVE-2020-11826Users can lock their notes with a password in Memono version…7.5
- CVE-2020-11827In GOG Galaxy 1.2.67, there is a service that is vulnerable …7.8
- CVE-2020-11829Dynamic loading of services in the backup and restore SDK le…9.8
- CVE-2020-1183A cross-site-scripting (XSS) vulnerability exists when Micro…5.4
- CVE-2020-11830QualityProtect has a vulnerability to execute arbitrary syst…9.8
- CVE-2020-11831OvoiceManager has system permission to write vulnerability r…9.8
- CVE-2020-11832In functions charging_limit_current_write and charging_limit…5.5
- CVE-2020-11833In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger…5.5
Are you affected by CVE-2020-11828?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST