Out-of-bounds

In l2crcvacldata of l2cmain.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

Design/Logic Flaw

In setRequirePmfInternal of stanetwork.cpp, there is a possible default value being improperly applied due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0057

In btmprocessinqresults of btminq.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

CVE-2020-0056

In btuhcifconnectioncompevt of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0055

Summary (CVE-2020-0055) : Affected software is Android 10. The issue is in the function l2c_link_process_num_completed_pkts of l2c_link.cc , where a missing bounds check allows a possible out-of-bounds read. This can lead to local information disclosure without additional execution privileges; us...

CVE-2020-0054

In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0053

In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidlstructutil.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...

CVE-2020-0052

CVE-2020-0052 affects Android 10 where In smsSelected of AnswerFragment.java an elevation-of-privilege vulnerability exists due to a permissions bypass that allows sending an SMS from the lock screen. The issue enables local privilege escalation with no extra execution privileges required; exploi...

CVE-2020-0052

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0085

In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege to activate tethering with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0085

CVE-2020-0085 affects Android 10 where an issue in PanService.java: setBluetoothTethering can bypass a permission check, enabling local escalation of privilege to activate tethering without extra execution privileges. The vulnerability is local, requires no user interaction, and could grant eleva...

CVE-2020-0051

In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of privilege in Settings with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138442483...

CVE-2020-0050

CVE-2020-0050 is an Android System issue affecting Android 10 where in nfa_hciu_send_msg (nfa_hci_utils.cc) an out-of-bounds write can occur due to improper input validation. This could enable local elevation of privilege in the NFC server with system-level execution privileges; exploitation does...

CVE-2020-0049

CVE-2020-0049 affects Android 10 Media Framework (StreamingSource.cpp: onReadBuffer()) with an information disclosure due to uninitialized data. Impact: potential remote information disclosure; exploitation requires user interaction. The issue is listed under Pixel security bulletins for CVE-2020...

CVE-2020-0049

In onReadBuffer of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID...

CVE-2020-0048

In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0047

CVE-2020-0047 affects Android 10; a missing permission check in AudioService.java (setMasterMute) allows local silencing of audio without extra execution privileges or user interaction. The issue is documented as Elevation of Privilege with likely impact limited to audio control. Public reference...

CVE-2020-0047

In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141622311...

CVE-2020-0046

In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0046

CVE-2020-0046 affects Android 10 Media Framework (DrmPlugin.cpp). It describes a heap-buffer overflow in DrmPlugin::releaseSecureStops causing an out-of-bounds write, enabling local privilege escalation without user interaction. Public details in the Pixel bulletin indicate patch level 2020-03-05...