CVE-2021-0370

The CVE-2021-0370 entry concerns Android 11 with a vulnerability in NxpMfcReader.cc where an out-of-bounds write occurs due to a missing bounds check. This can lead to local escalation of privilege on the NFC server with System execution privileges required; exploitation does not require user int...

CVE-2021-0368

CVE-2021-0368 concerns an out-of-bounds read in oggpack_look within bitwise.c, leading to potential information disclosure. The issue is documented for Android 11; the Pixel/Android bulletin indicates this vulnerability is addressed in updated AOSP versions (minimum patch level 2021-03-05, i.e., ...

CVE-2020-0025

In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0392

In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-175124730...

CVE-2021-0398

In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

CVE-2021-0391

In onCreate of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

CVE-2021-0391

CVE-2021-0391 affects Android Open Source Project: the vulnerability resides in the UI flow of ChooseTypeAndAccountActivity (onCreate in ChooseTypeAndAccountActivity.java). It allows learning whether an account exists via a tapjacking/overlay attack, without requiring permissions. Impact: local e...

CVE-2021-0395

In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

CVE-2021-0393

In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for...

PT-2021-13057

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the getUpTo17bits function of pvmp3 getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution...

PT-2021-13063

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue allows for a possible connection to untrusted WiFi networks due to notification interaction above the lockscreen. This could lead to local escalation of privilege with no additional execution...

PT-2021-13059

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass in the DeviceStorageMonitorService.java due to an unsafe PendingIntent. This could lead to local information disclosure, requiring User execution...

PT-2021-13051

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass due to an unsafe PendingIntent in the getMediaOutputSliceAction of RemoteMediaSlice.java. This could lead to local escalation of privilege with User...

PT-2021-13050

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the nci proc rf management ntf function of nci hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution...

PT-2021-9128

Name of the Vulnerable Software and Affected Versions Android version Android-11 Description The issue is related to a permissions bypass in the deletePackageVersionedInternal function of PackageManagerService.java. This could allow an attacker to exit Screen Pinning, potentially leading to local...

PT-2021-13065

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible use-after-free due to a race condition in the FindQuotaDeviceForUuid function of QuotaUtils.cpp. This could lead to local escalation of privilege, requiring System...

PT-2021-13055

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is related to a possible use of untrusted input due to improper input validation in DeltaPerformer::Write of delta performer.cc. This could lead to a local bypass of defense in depth protectio...

PT-2021-13067

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is related to a missing permission check in the setNightModeActivated function of UiModeManagerService.java. This could lead to local escalation of privilege with no additional execution...

PT-2021-13058

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: A missing permission check in the onReceive function of DcTracker.java allows for the potential triggering of a provisioning URL and modification of other telephony settings. This could lead to a local...

PT-2021-13052

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System executi...