PT-2020-11682

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-11 Description The issue is related to the OMX encoder, where invalid input validation can cause an out of bounds read. This could lead to local information disclosure without requiring additional execution...

PT-2020-11775

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in the SyncManager due to an unsafe PendingIntent. This could lead to local information disclosure without requiring additional execution privileges. User...

PT-2020-11690

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a confused deputy in MediaProvider, which could allow bypassing a permissions check. This might lead to local information disclosure, requiring User execution privileges for...

CVE-2020-0343: Missing Authorization

In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0396: Undefined Security Weakness

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

CVE-2020-0317: Missing Authorization

In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0338: Undefined Security Weakness

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-123700107...

PT-2020-11750

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description A permission bypass issue exists due to an unsafe PendingIntent in the getNotificationBuilder function of CarrierServiceStateTracker.java. This could lead to local information disclosure, requiring...

PT-2020-11743

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is...

PT-2020-11742

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description The issue is related to a possible permission bypass due to an unsafe PendingIntent in the createSaveNotification function of RecordingService.java. This could lead to local informatio...

PT-2020-11748

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description A permission bypass issue exists due to an unsafe PendingIntent in the EmergencyCallbackModeService.java. This could lead to local information disclosure, requiring User execution privileges. User...

PT-2020-11752

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description The issue is related to a possible permission bypass due to an unsafe PendingIntent in the showLimitedSimFunctionWarningNotification function of NotificationMgr.java. This could lead to local...

ASB-A-155094269

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-154123412

In decrypt and decrypt12 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2020-11749

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description The issue is related to a permission bypass in Telephony due to an unsafe PendingIntent, potentially leading to local information disclosure. This requires User execution privileges and does not need...

ASB-A-157598026

In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-154124307

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-156959408

In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-155092443

In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

Amazon Linux 2 : kernel (ALAS-2020-1480)

The version of kernel installed on the remote host is prior to 4.14.192-147.314. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1480 advisory. 2024-06-19: CVE-2020-14356 was added to this advisory. The Serial Attached SCSI SAS implementation in the Linux...