CVE-2020-0345: Externally Controlled Reference to a Resource in Another Sphere

In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144286721...

CVE-2020-0130: Improper Input Validation

In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system process with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0275: Incorrect Default Permissions

In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This could lead to local escalation of privilege, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0337: Undefined Security Weakness

In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124329382...

CVE-2020-0267: Externally Controlled Reference to a Resource in Another Sphere

In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilege due to launching a malicious app instead of the one the user intended, with no additional execution privileges needed. User interaction is needed for...

CVE-2020-0330: Use After Free

In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150331085...

CVE-2020-0333: Improper Input Validation

In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-73822755...

CVE-2020-0396: Undefined Security Weakness

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

CVE-2020-0395: Undefined Security Weakness

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2020-11775

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in the SyncManager due to an unsafe PendingIntent. This could lead to local information disclosure without requiring additional execution privileges. User...

PT-2020-11690

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a confused deputy in MediaProvider, which could allow bypassing a permissions check. This might lead to local information disclosure, requiring User execution privileges for...

PT-2020-11708

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libFraunhoferAAC, which could lead to a possible out of bounds read. This might result in remote information disclosure without requiring additional...

PT-2020-11722

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an integer overflow in libavb, which can cause an out of bounds write. This could potentially lead to a local escalation of privilege, and no additional execution privileges are...

PT-2020-11697

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permissions bypass due to SQL injection in MediaProvider. This could lead to local information disclosure without requiring additional execution privileges. User interaction is...

PT-2020-11715

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to improper input validation in libstagefright, which can cause resource exhaustion. This could lead to a remote denial of service, and no additional execution privileges are needed...

CVE-2020-0301: Improper Input Validation

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124940460...

PT-2020-11686

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to improper input validation in the UrlQuerySanitizer. This could lead to remote code execution with no additional execution privileges needed. User interaction is not required for...

CVE-2020-0373: Out-of-bounds Read

In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146894086...

PT-2020-11674

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds write in the mp3 extractor due to uninitialized data. This could potentially lead to remote code execution without requiring additional execution...

PT-2020-11677

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in libsonivox due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User...