CVE-2020-0191

In ih264dupdatedefaultindexlist of ih264ddpbmgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android...

CVE-2020-0134

In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0151

In avbvbmetaimageverify of avbvbmetaimage.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android...

CVE-2020-0151

CVE-2020-0151 affects Android 10 and is triggered in the avb_vbmeta_image_verify function of avb_vbmeta_image.c. The flaw is an out-of-bounds read due to a missing bounds check, leading to possible local information disclosure with system privileges (no user interaction required). Public details ...

CVE-2020-0131

In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0134

The CVE-2020-0134 entry concerns Android 10 where in BnDrm::onTransact of IDrm.cpp there is information disclosure due to uninitialized data. This can lead to local information disclosure without extra privileges and without user interaction. Public references include NVD and Red Hat advisories, ...

CVE-2020-0128

In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0167

CVE-2020-0167 affects Android 10 with an out-of-bounds read in ResourceTypes.cpp caused by an integer overflow, leading to potential local information disclosure. Exploitation requires user interaction, and the issue is classified as Moderate severity for the framework in the Pixel bulletin. Affe...

CVE-2020-0213

CVE-2020-0213 affects Android Media Framework (ihevcd_fmt_conv_420sp_to_420sp_av8) and is caused by a heap buffer overflow leading to a possible out-of-bounds write. Impact: remote information disclosure with no execution privileges required, exploitable with user interaction. Affected products/v...

CVE-2020-0182

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

CVE-2020-0194

CVE-2020-0194 is an Android 10 vulnerability in the Media Framework (ihevcd_parse_slice_header.c) where an integer overflow can cause an out-of-bounds write, enabling remote code execution and requiring user interaction to exploit. Public references from NVD/Red Hat/CNVD corroborate the descripti...

CVE-2020-0141

In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. This could lead to remote information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0191

CVE-2020-0191 targets Android 10 and is caused by a logic error in ih264d_update_default_index_list() within the Android Media Framework’s H.264 decoder (ih264d_dpb_mgr.c). This results in an out-of-bounds read, enabling potential information disclosure. Exploitation requires user interaction, an...

CVE-2020-0218

In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0126

In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930...

CVE-2020-0194

In ihevcdparsesliceheader of ihevcdparsesliceheader.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Andro...

CVE-2020-0135

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0193

CVE-2020-0193 is a vulnerability in Android 10 affecting the video codec path ihevc_intra_pred_chroma_mode_3_to_9_av8, described as an out-of-bounds read due to a heap buffer overflow. The issue could lead to remote information disclosure without additional execution privileges; exploitation requ...

CVE-2020-0127

In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersion...

CVE-2020-0218

CVE-2020-0218 affects Android 10, describing a race-condition in loadSoundModel and related code in SoundTriggerHwService.cpp that can cause an out-of-bounds write. This leads to local elevation of privilege with no additional execution privileges required; exploitation reportedly requires no use...