Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161151868References: N/A
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
Continuing the android journey, now with CVE-2020-0423. This is a deep dive towards fully exploiting and researching it. In this part, we create a POC of the UAF, along with the full research and flow: https://wired0ut.github.io/2026/04/27/binder-uaf-part-1.html Thoughts are appreciated.
Post summary
Author presents a Proof of Concept for CVE-2020-0423, linking to a detailed write‑up covering the vulnerability and exploitation flow.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 9.0 | - | - |
| OS | android | - | - | - |