CVE-2020-0235: Google Android

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the size parameter for "copy_from_user", ending up overwriting memory following "crus_sp_hdr". "crus_sp_hdr" is a static variable, of type "struct crus_sp_ioctl_header".Product: AndroidVersions: Android kernelAndroid ID: A-135129430

Affected products

• Google Android: affected versions not specified

Published 2020-06-16. Last modified 2026-06-17.