PT-2020-11535

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion due to a missing bounds check in the Parse ptbl function of eas mdls.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11514

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the phNxpNciHal write ext function of phNxpNciHal ext.cc, which could lead to a possible out of bounds write. This could result in local escalation of...

PT-2020-11533

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the Parse art function of eas mdls.c, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional executi...

PT-2020-11561

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible UID reuse due to improper cleanup in the freeIsolatedUidLocked function of ProcessList.java. This could lead to local escalation of privilege between constrained...

PT-2020-11510

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btu hcif mode change evt function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure via compromise...

PT-2020-11494

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a permissions bypass in MockLocationAppPreferenceController.java, allowing the mocking of a device's GPS location. This could lead to local escalation of privilege, requiring User...

PT-2020-11545

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the avrc pars browsing cmd function of avrc pars tg.cc due to a missing bounds check. This could lead to local information disclosure with no...

PT-2020-11502

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible heap disclosure due to a race condition in the OutputBuffersArray::realloc function of CCodecBuffers.cpp. This could lead to remote information disclosure, requiring...

PT-2020-11548

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion due to an infinite loop in the ihevcd decode function of ihevcd decode.c. This could lead to a remote denial of service, and no additional execution...

CVE-2020-0116

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0116

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0119

In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for...

CVE-2020-0114

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...

CVE-2020-0115

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

CVE-2020-0118

In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2020-0113

In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2020-0121

In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Integer overflow

In aescmac of aescmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1...

Information disclosure

In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for...

Design/Logic Flaw

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...