CVE-2020-0131

In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0194

CVE-2020-0194 is an Android 10 vulnerability in the Media Framework (ihevcd_parse_slice_header.c) where an integer overflow can cause an out-of-bounds write, enabling remote code execution and requiring user interaction to exploit. Public references from NVD/Red Hat/CNVD corroborate the descripti...

CVE-2020-0209

In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145206842...

CVE-2020-0167

CVE-2020-0167 affects Android 10 with an out-of-bounds read in ResourceTypes.cpp caused by an integer overflow, leading to potential local information disclosure. Exploitation requires user interaction, and the issue is classified as Moderate severity for the framework in the Pixel bulletin. Affe...

CVE-2020-0218

In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0208

CVE-2020-0208 affects Android Framework, specifically in multiple functions of AccountManager.java, where a permissions bypass could enable local privilege escalation with no additional execution privileges needed and without user interaction. The vulnerability is reflected in multiple sources: N...

CVE-2020-0208

In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145207098...

CVE-2020-0203

In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0203

CVE-2020-0203 affects Android 10 Framework: a bug in freeIsolatedUidLocked within ProcessList.java can cause UID reuse from improper cleanup, enabling local privilege escalation between constrained processes with no extra privileges and no user interaction required. The Pixel Update Bulletin list...

CVE-2020-0187

In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2020-11519

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the nfc ncif proc t3t polling ntf function of nfc ncif.cc due to a missing bounds check. This could lead to local information disclosure, requirin...

PT-2020-11566

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A permissions bypass issue exists in multiple functions of AccountManager.java. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

PT-2020-11561

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible UID reuse due to improper cleanup in the freeIsolatedUidLocked function of ProcessList.java. This could lead to local escalation of privilege between constrained...

PT-2020-11569

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the SumCompoundHorizontalTaps function of convolve neon.cc, which could lead to a possible out of bounds read. This might result in remote information...

PT-2020-11514

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the phNxpNciHal write ext function of phNxpNciHal ext.cc, which could lead to a possible out of bounds write. This could result in local escalation of...

PT-2020-11516

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the phNxpNciHal send ese hal cmd function of phNxpNciHal ext.cc, which could lead to a possible out of bounds write. This could result in local escalatio...

PT-2020-11548

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion due to an infinite loop in the ihevcd decode function of ihevcd decode.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11522

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to possible resource exhaustion due to improper input validation in the parseChunk function of MPEG4Extractor.cpp. This could lead to a remote denial of service, and no additional...

PT-2020-11504

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the nfa dm ndef find next handler function of nfa dm ndef.c. This could lead to local information disclosure of heap data. The exploitation requir...

PT-2020-11536

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to possible resource exhaustion due to improper input validation in the XMF ReadNode function of eas xmf.c. This could lead to a remote denial of service, and no additional execution...