CVE-2020-0404

In uvcscanchainforward of uvcdriver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0404

In uvcscanchainforward of uvcdriver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0403: Improper Privilege Management

In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privilege in the TEE, with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Andro...

PT-2020-11740

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible tapjacking vector in the manifest files of the SmartSpace package due to a missing permission check. This could lead to local escalation of privilege and account hijacking with no...

CVE-2020-0407: Use of Insufficiently Random Values

In various functions in fscryptice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs Initialization Vectors, 64-bit IVs are used and later are truncated to 32 bits. This may cause IV reuse and thus weakened disk encryption...

PT-2020-11778

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the use of the Catpipe library in Pixel, which can cause memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2020-0431: Out-of-bounds Write

In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2020-11758

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the use of 64-bit Initialization Vectors IVs in f2fs encryption, which are later truncated to 32 bits due to hardware limitations that only support 32-bit IVs. This may cause IV reuse, resulti...

CVE-2020-0432: Integer Overflow or Wraparound

In skbtomamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2020-0429: Use After Free

In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2020-0428: Concurrent Execution using Shared Resource with Improper Synchronization

In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-123999783...

PT-2020-5813

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a use after free in the l2tp session delete function of l2tp core.c in the Android kernel, which could lead to memory corruption. This could allow an...

PT-2020-11755

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an exposed test feature in the FPC TrustZone fingerprint App, which could lead to a local escalation of privilege in the TEE. System execution privileges are required for exploitation, and use...

PT-2020-11777

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible use after free due to improper locking in the blk mq queue tag busy iter function of blk-mq-tag.c. This could lead to local escalation of privilege with no additional execution...

PT-2020-11776

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible use after free due to a race condition in the CamX code. This could lead to local escalation of privilege, with System execution privileges required. User interaction is not needed...

CVE-2020-0404: Improper Privilege Management

In uvcscanchainforward of uvcdriver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0430: Out-of-bounds Read

In skbheadlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2020-0433: Use After Free

In blkmqqueuetagbusyiter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

CVE-2020-0427

In createpinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-1405501...

CVE-2020-0427

In createpinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-1405501...