CVE-2020-0393

In decrypt and decrypt12 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

CVE-2020-0393

CVE-2020-0393 affects Android during 9–11 in the Media Framework: decrypt and decrypt_1_2 in CryptoPlugin.cpp allow an out-of-bounds read due to a missing bounds check, enabling local information disclosure without user interaction. The issue is documented in multiple sources (NVD/NVD CVSS detail...

CVE-2020-0382

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2020-0074

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

CVE-2020-0289: Missing Authorization

In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996872...

PT-2020-11624

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in tremolo, which could lead to an out of bounds read. This might result in remote information disclosure without requiring additional execution privileges...

PT-2020-11689

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to possible memory corruption due to type confusion in SurfaceFlinger. This could lead to local escalation of privilege, requiring System execution privileges. User interaction is no...

PT-2020-11629

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This could lead to local escalation of privilege,...

PT-2020-11693

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure in the libcodec2 soft mp3dec component due to uninitialized data. This could lead to remote information disclosure without requiring additional...

PT-2020-11699

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an integer overflow in Mediaserver, which could lead to a possible out of bounds write. This might result in local escalation of privilege if integer sanitization were not enabled...

PT-2020-11757

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libmpeg2dec, which could lead to a possible out of bounds write. This might result in local escalation of privilege if triggered with different parameter...

PT-2020-11726

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a race condition in SoundTriggerHwService, which could lead to an out of bounds read. This might result in local information disclosure without requiring additional execution...

CVE-2020-0406: Out-of-bounds Write

In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allowed this to be triggered with different parameters, with no additional execution privileges needed. User interaction is needed for...

CVE-2020-0351: Improper Input Validation

In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777537...

CVE-2020-0320: Improper Input Validation

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129282427...

CVE-2020-0287: Improper Input Validation

In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141860394...

CVE-2020-0373: Out-of-bounds Read

In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146894086...

CVE-2020-0355: Out-of-bounds Read

In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141883493...

CVE-2020-0125: Out-of-bounds Read

In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282168...

CVE-2020-0306: Undefined Security Weakness

In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...