PT-2020-11564

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to improper input validation in the settings app, which can cause the app to crash. This could lead to a local denial of service of the Settings app, requiring User execution...

PT-2020-11498

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A missing permission check in the setIPv6AddrGenMode function of NetworkManagementService.java could allow a bypass of networking permissions. This issue may lead to local escalation of privilege without...

PT-2020-11557

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible use-after-free due to a race condition exists in TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp. This could lead to local information disclosure with System execution privileges neede...

PT-2020-11493

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to unsafe deserialization in BnAAudioService::onTransact of IAAudioService.cpp. This could lead to local information disclosure with no additiona...

PT-2020-11497

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an integer overflow in Parcel.cpp, which can cause an out-of-bounds write. This could lead to local escalation of privilege in the system server without requiring additional...

PT-2020-11570

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to a use after free in the onBufferDestroyed function of InputBufferManager.cpp. This could lead to remote information disclosure with no...

PT-2020-11567

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A permissions bypass issue exists in multiple functions of AccountManager.java. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

PT-2020-11519

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the nfc ncif proc t3t polling ntf function of nfc ncif.cc due to a missing bounds check. This could lead to local information disclosure, requirin...

PT-2020-11522

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to possible resource exhaustion due to improper input validation in the parseChunk function of MPEG4Extractor.cpp. This could lead to a remote denial of service, and no additional...

PT-2020-11512

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible out of bounds read due to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c could lead to a local information disclosure. This issue requires System executio...

PT-2020-11496

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible backup metadata exposure exists due to a missing permission check in the RollbackManagerServiceImpl.java dump. This could lead to local information disclosure, requiring System execution...

PT-2020-11537

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out-of-bounds read in the avdt msg prs rej function of avdt msg.cc due to improper input validation. This could lead to remote information disclosure without requiring...

PT-2020-11523

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to improper input validation in the parseSampleAuxiliaryInformationOffsets function of MPEG4Extractor.cpp. This could lead to resource exhaustion, resulting in a remote denial of...

PT-2020-11538

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible permissions bypass in the connect function of PanService.java. This could lead to local escalation of privilege, allowing changes to network connection settings without...

PT-2020-11539

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing permission check in the getAllConfigFlags function of SettingsProvider.cpp. This could lead to local information disclosure of config flags without requiring additional...

PT-2020-11489

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the addPacket function of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges...

PT-2020-11487

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible use after free due to a race condition in multiple functions in DrmPlugin.cpp. This could lead to local code execution with System execution privileges required. User...

PT-2020-11535

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion due to a missing bounds check in the Parse ptbl function of eas mdls.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11514

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the phNxpNciHal write ext function of phNxpNciHal ext.cc, which could lead to a possible out of bounds write. This could result in local escalation of...

PT-2020-11533

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the Parse art function of eas mdls.c, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional executi...