CVE-2020-0075: Out-of-bounds Read

In setsharedkey of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2020-0076: Out-of-bounds Write

In getauthresult of the FPC IRIS TrustZone app, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2020-11441

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the get auth result function of the FPC IRIS TrustZone app, which could lead to a possible out of bounds write. This could result in local escalation of privilege, wi...

PT-2020-11442

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the authorize enroll function of the FPC IRIS TrustZone app, which can lead to an out of bounds read. This could result in local information disclosure, requiring...

PT-2020-11440

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the set shared key function of the FPC IRIS TrustZone app, which could lead to a local information disclosure. This requires System execution privileges and does not...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-33671)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in Juniper Networks Junos OS 12.3X48. An attacker could exploit this...

CVE-2020-1638

The FPC Flexible PIC Concentrator of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restar...

Race condition

The FPC Flexible PIC Concentrator of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restar...

CVE-2020-1638

The CVE-2020-1638 issue affects Juniper Junos OS and Junos OS Evolved FPCs in MX Series (MPC10E/MPC11E) and PTX10001/PTX10003 lines, where processing a specific IPv4 packet can trigger an FPC restart and drop all traffic via the FPC, causing a sustained DoS. Affected ranges include: Junos OS on M...

CVE-2020-1638 Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.

The FPC Flexible PIC Concentrator of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restar...

CVE-2020-1634 Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

PT-2020-4141

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.2R1-S4, 19.2R2, 19.3R2-S2, 19.3R3, 19.4R1-S1, 19.4R2 Junos OS Evolved versions prior to 19.4R2-EVO Description: The issue exists due to insufficient input validation in the FPC module of Junos OS and Junos OS...

Google Android FPC Iris TZ App Out-of-Bounds Read Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA in the U.S. The FPC Iris TZ App is one of the iris recognition components. A security vulnerability exists in the FPC Iris TZ App in Android. The vulnerability can be exploited by an attacker to...

CVE-2020-1638: Use of sizeof() on a Pointer Type

The FPC Flexible PIC Concentrator of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restar...

PT-2020-11408

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the authorize enrol function of fpc ta hw auth.c due to a missing bounds check. This could lead to local information disclosure, requiring System execution...

PT-2020-11407

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the fpc ta hw auth unwrap key function of fpc ta hw auth qsee.c. This could lead to local information disclosure, requiring System execution privileges for...

PT-2020-11382

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the fpc ta pn get unencrypted image function of fpc ta pn.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege,...

PT-2020-11409

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible out of bounds read in the set nonce function of fpc ta qc auth.c. This could lead to local information disclosure, requiring System executio...

PT-2020-11380

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the fpc ta get build info function of fpc ta kpi.c due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution...

PT-2020-11381

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the get auth result function of fpc ta hw auth.c due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution...