PT-2020-11574

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds write due to an integer overflow in the phNciNfc RecvMfResp function of phNxpExtns MifareStd.cpp. This could lead to local escalation of privilege with no...

PT-2020-11568

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible permissions bypass to a confused deputy in the removeSharedAccountAsUser function of AccountManager.java. This could lead to local escalation of privilege, requiring Us...

PT-2020-11523

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to improper input validation in the parseSampleAuxiliaryInformationOffsets function of MPEG4Extractor.cpp. This could lead to resource exhaustion, resulting in a remote denial of...

PT-2020-11534

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to possible resource exhaustion due to improper input validation in the Parse lins function of eas mdls.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11533

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the Parse art function of eas mdls.c, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional executi...

CVE-2020-0169: Improper Input Validation

In RTTTLEvent of easrtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123700383...

PT-2020-11499

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds write in the get element attr rsp function of btif rc.cc due to a missing bounds check. This could potentially lead to remote code execution, although it'...

PT-2020-11537

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out-of-bounds read in the avdt msg prs rej function of avdt msg.cc due to improper input validation. This could lead to remote information disclosure without requiring...

PT-2020-11554

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to uninitialized data in the ihevcd iquant itrans recon ctb function of ihevcd iquant itrans recon ctb.c and related functions, which could lead to remote information disclosure...

CVE-2020-0115

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

CVE-2020-0116

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0113

In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2020-0114

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...

CVE-2020-0118

In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2020-0119

In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for...

CVE-2020-0121

In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0116

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Design/Logic Flaw

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Information disclosure

In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for...

Design/Logic Flaw

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...