CVE-2020-0041VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-0041: Android Kernel Out-of-Bounds Write Vulnerability

Affects Android Android KernelSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 3.1% chance of exploitation in 30 days – higher than 87% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-0041 (opens in a new tab)

Description

CVE-2020-0041 is an out-of-bounds write vulnerability in the Android Kernel's binder_transaction function due to an incorrect bounds check. This flaw can be exploited locally to escalate privileges. It has been observed in the wild as part of an exploit chain named "AbstractEmu," combined with other vulnerabilities CVE-2019-2215 and CVE-2020-0069. The vulnerability affects the Android Kernel but specific affected versions are not stated. The severity is high given its exploitation in the wild and potential for privilege escalation.

Summary

The Android Kernel contains an out-of-bounds write vulnerability in the binder_transaction function within binder.c caused by an incorrect bounds check. This vulnerability enables a local attacker to escalate privileges on the device. It has been exploited in the wild as part of the "AbstractEmu" exploit chain alongside CVE-2019-2215 and CVE-2020-0069. No specific affected versions or patch information is provided in the available data.

Impact

Successful exploitation of this vulnerability allows a local attacker to perform privilege escalation on affected Android devices. This can lead to unauthorized access to higher privilege levels within the operating system, potentially compromising device security. The vulnerability has been observed exploited in the wild, indicating active threat usage.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users and administrators should monitor official Android security bulletins for updates addressing CVE-2020-0041. Until a fix is available, restricting local access and applying general device security best practices may reduce risk.

Weaknesses

CWE-20Improper Input Validation (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:42:06 UTC

Weaknesses

References

Related threats