CVE-2020-0219

In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-122836081...

CVE-2020-0144

In btmprocspreqevt of btmsec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0159

In rwmfcwriteBlock of rwmfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140768035...

CVE-2020-0154

In nciproccorersp of ncihrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0183

In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-110181479...

CVE-2020-0216

In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2020-0188

In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingIntent error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0216

Technical details about CVE-2020-0216 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-0183

CVE-2020-0183 (Android 10): In BluetoothManagerService.handleMessage there is an incomplete reset, enabling local elevation of privilege. Affected component: Android Bluetooth stack (Android-10). According to NVD, CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, user interaction requi...

CVE-2020-0165

In phNxpNciHalNfcDepcmdext of phNxpNciHalNfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege via compromised device firmware with System execution privileges needed. User interaction is not needed for...

CVE-2020-0155

In phNxpNciHalsendesehalcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0165

CVE-2020-0165 affects Android 10. The issue is a potential out-of-bounds write in phNxpNciHal_NfcDep_cmd_ext (nfc driver code), caused by a missing bounds check, enabling local escalation of privilege with System execution privileges; no user interaction required. CVSSv3.1 base score 6.7 (Local, ...

CVE-2020-0156

CVE-2020-0156 affects Android 10 and points to an out-of-bounds read in the NxpNfc::ioctl path of NxpNfc.cpp caused by a missing bounds check. The issue enables local information disclosure with user privileges; exploitation does not require user interaction but is local in nature. CVSS metrics i...

CVE-2020-0156

In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736127...

CVE-2020-0139

CVE-2020-0139 affects Android 10. The vulnerability is a flaw in NDEF_MsgValidate (ndef_utils.c) where an integer overflow can cause an out-of-bounds read, potentially enabling local information disclosure when a malformed NFC tag is processed by the firmware. Exploitation is described as requiri...

CVE-2020-0149

CVE-2020-0149 describes a local info-disclosure flaw in Android 10 caused by an out-of-bounds read in btu_hcif_mode_change_evt (btu_hcif.cc). The issue allows local attackers with System privileges to access information without user interaction. Affected: Android 10 devices; vector is local. The ...

CVE-2020-0157

In nfahciconncback of nfahcimain.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0164

In phNxpNciHalNfcDepcmdext of phNxpNciHalNfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0147

CVE-2020-0147 affects Android 10 (Pixel devices) due to an out-of-bounds read in btu_hcif_esco_connection_chg_evt of btu_hcif.cc caused by a missing bounds check. This enables local information disclosure with system-execution privileges needed; no user interaction required. Connected sources con...

CVE-2020-0195

In ihevcdiquantitransreconctb of ihevcdiquantitransreconctb.c and related functions, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for...