CVE-2020-0218: Concurrent Execution using Shared Resource with Improper Synchronization

In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0132: Out-of-bounds Read

In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0219: NULL Pointer Dereference

In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-122836081...

CVE-2020-0126: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930...

PT-2020-11547

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an incomplete comparison in the engineSetMode function of BaseBlockCipher.java, which could lead to the selection of an incorrect cryptographic algorithm. This might result in loc...

PT-2020-11497

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an integer overflow in Parcel.cpp, which can cause an out-of-bounds write. This could lead to local escalation of privilege in the system server without requiring additional...

PT-2020-11518

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the nfa hci conn cback function of nfa hci main.cc. This could lead to remote information disclosure via compromised device firmware, requiring...

PT-2020-11543

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an incomplete reset in the handleMessage of BluetoothManagerService. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2020-11565

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the next marker function of jdmarker.c due to improper input validation. This could lead to remote information disclosure without requiring...

PT-2020-11512

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible out of bounds read due to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c could lead to a local information disclosure. This issue requires System executio...

PT-2020-11556

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the parsePssh function of InitDataParser.cpp, which can lead to a possible out of bounds read. This could result in local information disclosure without...

PT-2020-11489

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the addPacket function of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges...

PT-2020-11517

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the NxpNfc::ioctl function of NxpNfc.cpp, which could lead to a possible out of bounds read. This might result in local information disclosure, requiring...

PT-2020-11507

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btu hcif hardware error evt function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure via...

PT-2020-11535

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion due to a missing bounds check in the Parse ptbl function of eas mdls.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11572

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an incorrect bounds check in the ce t4t process select file cmd function of ce t4t.cc, which could lead to a possible out of bounds read. This might result in remote information...

PT-2020-11545

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the avrc pars browsing cmd function of avrc pars tg.cc due to a missing bounds check. This could lead to local information disclosure with no...

PT-2020-11527

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible escalation of privilege in multiple functions of URI.java due to missing validation in the parceling of URI information. This could lead to a local escalation of...

PT-2020-11493

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to unsafe deserialization in BnAAudioService::onTransact of IAAudioService.cpp. This could lead to local information disclosure with no additiona...

PT-2020-11502

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible heap disclosure due to a race condition in the OutputBuffersArray::realloc function of CCodecBuffers.cpp. This could lead to remote information disclosure, requiring...