PT-2020-11712

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a buffer overflow in the GLESRenderEngine, which could lead to a possible out of bounds read. This might result in local information disclosure without requiring additional...

PT-2020-11681

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read due to an integer overflow in the camera. This could lead to local information disclosure, with System execution privileges required for exploitation...

PT-2020-11698

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a confused deputy in DocumentsUI, which could allow a permission bypass. This might lead to local escalation of privilege without requiring additional execution privileges. User...

PT-2020-11713

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permissions bypass in Notification Access Confirmation due to uninformed consent. This could lead to local escalation of privilege, with the attack requiring user interaction an...

PT-2020-11706

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libmp4extractor, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional execution privileges are...

PT-2020-11643

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for...

PT-2020-11774

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue allows for local information disclosure without requiring additional execution privileges. It enables viewing notifications even when the Lockdown feature is enabled. User interaction is not...

PT-2020-11641

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible resource exhaustion due to a missing bounds check in libmkvextractor. This could lead to remote denial of service with no additional execution privileges needed. User...

CVE-2020-0320: Improper Input Validation

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129282427...

PT-2020-11727

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an unsafe PendingIntent in NFC, which could allow a permission bypass. This might lead to a local escalation of privilege, requiring User execution privileges. Notably, user...

PT-2020-11624

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in tremolo, which could lead to an out of bounds read. This might result in remote information disclosure without requiring additional execution privileges...

PT-2020-11689

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to possible memory corruption due to type confusion in SurfaceFlinger. This could lead to local escalation of privilege, requiring System execution privileges. User interaction is no...

PT-2020-11629

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This could lead to local escalation of privilege,...

PT-2020-11675

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in apexd due to a missing bounds check. This could lead to local information disclosure, with System execution privileges required for exploitation...

PT-2020-11693

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure in the libcodec2 soft mp3dec component due to uninitialized data. This could lead to remote information disclosure without requiring additional...

PT-2020-11726

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a race condition in SoundTriggerHwService, which could lead to an out of bounds read. This might result in local information disclosure without requiring additional execution...

CVE-2020-0406: Out-of-bounds Write

In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allowed this to be triggered with different parameters, with no additional execution privileges needed. User interaction is needed for...

Android 11 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.

This Android Security Release Notes contains details of security vulnerabilities affecting Android devices which are addressed as part of Android 11. Android 11 devices with a security patch level of 2020-09-01 or later are protected against these issues Android 11, as released on AOSP, has a...

CVE-2020-0213

In hevcdfmtconv420spto420spav8 of ihevcdfmtconv420spto420sp.s, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

CVE-2020-0202

In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...