PT-2020-11570

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to a use after free in the onBufferDestroyed function of InputBufferManager.cpp. This could lead to remote information disclosure with no...

PT-2020-11564

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to improper input validation in the settings app, which can cause the app to crash. This could lead to a local denial of service of the Settings app, requiring User execution...

PT-2020-11539

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing permission check in the getAllConfigFlags function of SettingsProvider.cpp. This could lead to local information disclosure of config flags without requiring additional...

PT-2020-11532

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion due to a missing bounds check in the Parse lart function of eas mdls.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11511

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the rw t3t message set block list function of rw t3t.cc, which could lead to a possible out of bounds write. This could result in local escalation of...

PT-2020-11496

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible backup metadata exposure exists due to a missing permission check in the RollbackManagerServiceImpl.java dump. This could lead to local information disclosure, requiring System execution...

PT-2020-11557

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible use-after-free due to a race condition exists in TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp. This could lead to local information disclosure with System execution privileges neede...

PT-2020-11487

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible use after free due to a race condition in multiple functions in DrmPlugin.cpp. This could lead to local code execution with System execution privileges required. User...

PT-2020-11525

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the phNxpNciHal NfcDep cmd ext function of phNxpNciHal NfcDepSWPrio.cc. This could lead to local information disclosure, requiring System executio...

PT-2020-11540

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible path traversal attack due to insufficient input validation in the doSendObjectInfo function of MtpServer.cpp. This could lead to local escalation of privilege with no...

PT-2020-11523

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to improper input validation in the parseSampleAuxiliaryInformationOffsets function of MPEG4Extractor.cpp. This could lead to resource exhaustion, resulting in a remote denial of...

PT-2020-11538

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible permissions bypass in the connect function of PanService.java. This could lead to local escalation of privilege, allowing changes to network connection settings without...

PT-2020-11513

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c, which could lead to a possible out of bounds read. This might result in local information...

PT-2020-11531

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the IMY Event of eas imelody.c, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional execution...

PT-2020-11510

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btu hcif mode change evt function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure via compromise...

PT-2020-11577

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible insecure Intent in the onCreate of SliceDeepLinkSpringBoard.java. This could lead to local elevation of privilege with no additional execution privileges needed. User...

PT-2020-11567

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A permissions bypass issue exists in multiple functions of AccountManager.java. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

PT-2020-11498

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A missing permission check in the setIPv6AddrGenMode function of NetworkManagementService.java could allow a bypass of networking permissions. This issue may lead to local escalation of privilege without...

PT-2020-11494

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a permissions bypass in MockLocationAppPreferenceController.java, allowing the mocking of a device's GPS location. This could lead to local escalation of privilege, requiring User...

PT-2020-11528

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to an integer overflow in the load of ResourceTypes.cpp. This could lead to local information disclosure with no additional execution privileges...