References https://nvd.nist.gov/vuln/detail/CVE-2020-0041 https://source.android.com/security/bulletin/2020-03-01 https://github.com/bluefrostsecurity/CVE-2020-0041 https://synacktiv.com/publications/binder-analysis-and-exploitation-of-cve-2020-0041 https://labs.bluefrostsecurity.de/blog/2020/03/31/cve-2020-0041-part-1-sandbox-escape/ https://labs.bluefrostsecurity.de/blog/2020/04/08/cve-2020-0041-part-2-escalating-to-root/ https://www.anquanke.com/post/id/202385 https://www.anquanke.com/post/id/202810 https://synacktiv.com/en/publications/binder-analysis-and-exploitation-of-cve-2020-0041 https://www.sentinelone.com/vulnerability-database/cve-2020-0041/
Related Vulnerabilities(CVE-2025-0087) Android UninstallerActivity onCreate 方法权限漏洞 权限管理错误(CVE-2025-8745)Weee RICEPO Android应用组件不当导出漏洞金和OA C6 /c6/jhsoft.mobileapp/AndroidSevices/HomeService.asmx/GetHomeInfo SQL 注入漏洞(CVE-2025-21024) Smart View在Android 16之前版本中因使用隐式意图导致敏感信息泄露漏洞(CVE-2025-21016)Android PkgPredictorService访问控制漏洞PoCandroid-minsdk-21: AndroidManifest.xml minSdkVersion Set to 21 (Insecure Minimum SDK Version)PoCandroid-user-certificates-trust: Android Trusts User CertificatesPoCimproper-certificate-validation: Android Improper Certificate Validation - DetectPoCandroid-debug-enabled: Android Debug EnabledPoCinsecure-provider-path: Android Insecure Provider Path - DetectPoCwebview-universal-access: Android WebView Universal Access - DetectPoCandroid-debug-database-exposed: Android Debug Manager