7516 matches found
CVE-2020-27036
In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...
CVE-2020-27036
CVE-2020-27036 is a local elevation-of-privilege issue in Android 11’s NFC stack. The vulnerability occurs in phNxpNciHal_send_ext_cmd implemented by phNxpNciHal_ext.cc, where a missing bounds check enables an out-of-bounds write. This could lead to local escalation of privilege on the NFC server...
CVE-2020-27031
CVE-2020-27031 affects Android 11, where in nfc_data_event of nfc_ncif.cc there is a possible out-of-bounds read due to a missing bounds check. This can lead to local information disclosure and may require system privileges, with no user interaction needed for exploitation. The provided documents...
CVE-2020-27028
In filterincomingevent of hcilayer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...
CVE-2020-27028
CVE-2020-27028 affects Android 11 and relates to an out-of-bounds read in filter_incoming_event of hci_layer.cc due to a missing bounds check. This can enable local information disclosure with system-level privileges, and does not require user interaction to exploit. The issue is documented acros...
CVE-2020-27027
CVE-2020-27027: In the NFC code path, specifically in nfc_ncif_proc_get_routing of nfc_ncif.cc, an out-of-bounds read due to a missing bounds check is described as enabling local information disclosure without requiring user interaction. The Android-11 reference in the initial entry is supported ...
CVE-2020-27021
In avrcctrlparsvendorcmd of avrcparstg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...
CVE-2020-0490
In floor1infounpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...
CVE-2020-0489
CVE-2020-0489 involves a suspected out-of-bounds write in the Android media framework (Parse_data in eas_mdls.c) which could lead to remote code execution in the media extractor. Affected software is Android 11, notably Pixel devices. The root cause is a missing bounds check in Parse_data, enabli...
CVE-2020-0478
In extendframelowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...
CVE-2020-0280
In nciproceemanagementrsp of ncihrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID...
CVE-2020-0280
CVE-2020-0280 affects Android 11 and is caused by an out-of-bounds read in nci_proc_ee_management_rsp of nci_hrcv.cc due to a missing bounds check. This can lead to local information disclosure with no additional execution privileges; exploitation requires user interaction. The documentation does...
CVE-2020-0244
CVE-2020-0244 affects Android 11, describing an out-of-bounds read in SPDIFEncoder.cpp (writeBurstBufferBytes) caused by an incorrect bounds check. This can lead to local information disclosure without a clear exfiltration path; exploitation requires user interaction. The NVD entry lists CVSS det...
FIFO event channels control structure ordering
ISSUE DESCRIPTION A bounds check common to most operation time functions specific to FIFO event channels depends on the CPU observing consistent state. While the producer side uses appropriately ordered writes, the consumer side isn't protected against re-ordered reads, and may hence end up...
Virtuozzo 7 : java-1.8.0-openjdk / etc (VZLSA-2019-1815)
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2020-0456
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843...
CVE-2020-0456
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843...
CVE-2020-0465
In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
Out-of-bounds
In sdpserverhandleclientreq of sdpserver.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...