CVE-2020-0393

CVE-2020-0393 affects Android during 9–11 in the Media Framework: decrypt and decrypt_1_2 in CryptoPlugin.cpp allow an out-of-bounds read due to a missing bounds check, enabling local information disclosure without user interaction. The issue is documented in multiple sources (NVD/NVD CVSS detail...

CVE-2020-0393

In decrypt and decrypt12 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

CVE-2020-0382

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2020-0074

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

PT-2020-11624

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in tremolo, which could lead to an out of bounds read. This might result in remote information disclosure without requiring additional execution privileges...

PT-2020-11641

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible resource exhaustion due to a missing bounds check in libmkvextractor. This could lead to remote denial of service with no additional execution privileges needed. User...

PT-2020-11699

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an integer overflow in Mediaserver, which could lead to a possible out of bounds write. This might result in local escalation of privilege if integer sanitization were not enabled...

PT-2020-11726

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a race condition in SoundTriggerHwService, which could lead to an out of bounds read. This might result in local information disclosure without requiring additional execution...

PT-2020-11693

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure in the libcodec2 soft mp3dec component due to uninitialized data. This could lead to remote information disclosure without requiring additional...

PT-2020-11722

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an integer overflow in libavb, which can cause an out of bounds write. This could potentially lead to a local escalation of privilege, and no additional execution privileges are...

PT-2020-11716

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible resource exhaustion in libmedia due to improper input validation. This could lead to a remote denial of service, and no additional execution privileges are needed. User...

PT-2020-11667

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to missing permission checks in the AudioService, which could lead to local information disclosure of audio configuration. No additional execution privileges are needed for...

PT-2020-11711

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible use after free due to a race condition in SurfaceFlinger. This could lead to local escalation of privilege, requiring System execution privileges. User interaction is n...

CVE-2020-0312: Undefined Security Weakness

In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153879099...

PT-2020-11670

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue concerns a missing permission check in the UsageStatsManager, potentially allowing access to protected data. This could lead to local information disclosure without requiring additional executi...

PT-2020-11705

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permissions bypass due to SQL injection in MediaProvider. This could lead to local information disclosure without requiring additional execution privileges. User interaction is...

PT-2020-11715

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to improper input validation in libstagefright, which can cause resource exhaustion. This could lead to a remote denial of service, and no additional execution privileges are needed...

PT-2020-11674

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds write in the mp3 extractor due to uninitialized data. This could potentially lead to remote code execution without requiring additional execution...

PT-2020-11647

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue concerns a missing permission check in Java network APIs, potentially allowing access to sensitive network state. This could lead to local information disclosure without requiring additional...

PT-2020-11677

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in libsonivox due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User...