CVE-2020-0240

CVE-2020-0240 is an out-of-bounds write vulnerability in the NewFixedDoubleArray function of factory.cc, affecting Android 10. This flaw, stemming from an integer overflow, could enable remote code execution without elevated privileges, though user interaction is required for exploitation. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability. Despite the high severity, the attack complexity is low, making it easier to exploit once user interaction is achieved. Currently, there is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable. While there's limited community discussion and media coverage, Samsung has released updates addressing this and other critical vulnerabilities.