CVE-2020-0127

In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersion...

CVE-2020-0135

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0194

In ihevcdparsesliceheader of ihevcdparsesliceheader.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Andro...

CVE-2020-0131

In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0182

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

CVE-2020-0208

CVE-2020-0208 affects Android Framework, specifically in multiple functions of AccountManager.java, where a permissions bypass could enable local privilege escalation with no additional execution privileges needed and without user interaction. The vulnerability is reflected in multiple sources: N...

CVE-2020-0208

In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145207098...

CVE-2020-0203

CVE-2020-0203 affects Android 10 Framework: a bug in freeIsolatedUidLocked within ProcessList.java can cause UID reuse from improper cleanup, enabling local privilege escalation between constrained processes with no extra privileges and no user interaction required. The Pixel Update Bulletin list...

CVE-2020-0203

In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0187

In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2020-11577

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible insecure Intent in the onCreate of SliceDeepLinkSpringBoard.java. This could lead to local elevation of privilege with no additional execution privileges needed. User...

PT-2020-11565

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the next marker function of jdmarker.c due to improper input validation. This could lead to remote information disclosure without requiring...

PT-2020-11556

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the parsePssh function of InitDataParser.cpp, which can lead to a possible out of bounds read. This could result in local information disclosure without...

PT-2020-11513

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c, which could lead to a possible out of bounds read. This might result in local information...

CVE-2020-0126: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930...

PT-2020-11545

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the avrc pars browsing cmd function of avrc pars tg.cc due to a missing bounds check. This could lead to local information disclosure with no...

PT-2020-11502

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible heap disclosure due to a race condition in the OutputBuffersArray::realloc function of CCodecBuffers.cpp. This could lead to remote information disclosure, requiring...

PT-2020-11518

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the nfa hci conn cback function of nfa hci main.cc. This could lead to remote information disclosure via compromised device firmware, requiring...

PT-2020-11569

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the SumCompoundHorizontalTaps function of convolve neon.cc, which could lead to a possible out of bounds read. This might result in remote information...

PT-2020-11566

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A permissions bypass issue exists in multiple functions of AccountManager.java. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...