PT-2020-11657

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible use after free due to improper locking in the Media extractor. This could lead to remote code execution in the media extractor with no additional execution privileges...

PT-2020-11676

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libavb, which could lead to a possible out of bounds read. This might result in local information disclosure without requiring additional execution...

CVE-2020-0336: Out-of-bounds Write

In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444...

CVE-2020-0396: Undefined Security Weakness

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

PT-2020-11714

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure in libDRCdec due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed, requirin...

PT-2020-11620

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2020-11697

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permissions bypass due to SQL injection in MediaProvider. This could lead to local information disclosure without requiring additional execution privileges. User interaction is...

PT-2020-11717

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libDRCdec, which could lead to a possible out of bounds read. This might result in remote information disclosure without requiring additional execution...

PT-2020-11698

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a confused deputy in DocumentsUI, which could allow a permission bypass. This might lead to local escalation of privilege without requiring additional execution privileges. User...

PT-2020-11706

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libmp4extractor, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional execution privileges are...

PT-2020-11643

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for...

PT-2020-11727

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an unsafe PendingIntent in NFC, which could allow a permission bypass. This might lead to a local escalation of privilege, requiring User execution privileges. Notably, user...

PT-2020-11774

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue allows for local information disclosure without requiring additional execution privileges. It enables viewing notifications even when the Lockdown feature is enabled. User interaction is not...

PT-2020-11713

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permissions bypass in Notification Access Confirmation due to uninformed consent. This could lead to local escalation of privilege, with the attack requiring user interaction an...

PT-2020-11673

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to improper input validation in libstagefright, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional execution privileges are...

PT-2020-11775

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in the SyncManager due to an unsafe PendingIntent. This could lead to local information disclosure without requiring additional execution privileges. User...

PT-2020-11719

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a tapjacking vulnerability in the PackageInstaller, which could lead to a local escalation of privilege. This can occur when an app is set as the default Assist app and has User...

PT-2020-11708

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libFraunhoferAAC, which could lead to a possible out of bounds read. This might result in remote information disclosure without requiring additional...

PT-2020-11629

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This could lead to local escalation of privilege,...

CVE-2020-0264: Integer Overflow or Wraparound

In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-116718596...