CVE-2020-0477

In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of the current network configuration with no additional execution privileges needed. User interaction is n...

CVE-2020-0476

In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0475

In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0475

CVE-2020-0475 affects Android 11 where in WindowManagerService.createInputConsumer there is a missing permission check, enabling a local elevation of privilege by intercepting input events. Exploitation requires user interaction; no remote access assumed. Public sources (Red Hat, NVD, CVE lists) ...

CVE-2020-0474

In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

CVE-2020-0474

CVE-2020-0474 affects Android 11 in the Media framework (HalCamera.cpp, HalCamera::requestNewFrame). It is a use-after-free due to a race condition, enabling local elevation of privilege with no extra execution privileges required. Exploitation is local and does not require user interaction. NVD ...

CVE-2020-0473

In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical possession of the device to transfer files to it over Bluetooth, with no additional execution...

CVE-2020-0368

In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0280

In nciproceemanagementrsp of ncihrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID...

CVE-2020-0244

In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no clear exfiltration path, with no additional execution privileges needed. User interaction is needed for...

PT-2020-11721 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass due to improper input validation in the queryInternal function of CallLogProvider.java. This could lead to local information disclosure of voicemail...

PT-2020-16602

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible permission bypass due to an unsafe PendingIntent in EapFailureNotifier.java and SimRequiredNotifier.java. This could lead to local information disclosure with User...

PT-2020-11599

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in the writeBurstBufferBytes function of SPDIFEncoder.cpp. This could lead to local information disclosure, but there is no clear path for exfiltrati...

PT-2020-11824

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in the Parse data function of eas mdls.c, which could lead to an out of bounds write. This might result in remote code execution in the media extractor...

PT-2020-16630

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description A missing permission check in the onFactoryReset method of BluetoothManagerService.java could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

PT-2020-11826

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible denial of service due to resource exhaustion in the readBlock function of MatroskaExtractor.cpp. This could lead to a remote denial of service with no additional...

PT-2020-11809

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible use-after-free due to a race condition in the HalCamera::requestNewFrame function of HalCamera.cpp. This could lead to local escalation of privilege with no additional...

PT-2020-11830

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the decode Huffman function of JBig2 SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local information disclosure with no additional execution...

PT-2020-16626

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the rw i93 send cmd write multi blocks function of rw i93.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional...

PT-2020-16622

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in the nfc ncif proc ee action function of nfc ncif.cc due to a missing bounds check. This could lead to local information disclosure, requiring Syst...