CVE-2020-0164

In phNxpNciHalNfcDepcmdext of phNxpNciHalNfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0156

In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736127...

CVE-2020-0139

In NDEFMsgValidate of ndefutils.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. System execution privileges are needed and user interaction is not needed for...

CVE-2020-0199

CVE-2020-0199 affects Android 10 with a race-condition in TimeCheck.cpp TimeCheckThread::threadLoop that can cause use-after-free and local information disclosure, potentially gaining system privileges. The description specifies no user interaction required. Connected sources repeat the same deta...

CVE-2020-0197

In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0199

In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0152

In avbvbmetaimageverify of avbvbmetaimage.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

CVE-2020-0151

In avbvbmetaimageverify of avbvbmetaimage.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android...

CVE-2020-0182

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

CVE-2020-0135

CVE-2020-0135 affects Android 10, where in RollbackManagerServiceImpl.java a missing permission check can cause backup metadata exposure, enabling local information disclosure with System privileges (no user interaction required). The issue is documented across multiple sources (NVD/Red Hat/PRION...

CVE-2020-0167

In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-129475100...

CVE-2020-0152

CVE-2020-0152 affects Android 10 and is tied to the function avb_vbmeta_image_verify in avb_vbmeta_image.c . The root cause is a missing bounds check that enables an out-of-bounds read, leading to possible information disclosure with system-level privileges; exploitation does not require user int...

CVE-2020-0182

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

CVE-2020-0167

CVE-2020-0167 affects Android 10 with an out-of-bounds read in ResourceTypes.cpp caused by an integer overflow, leading to potential local information disclosure. Exploitation requires user interaction, and the issue is classified as Moderate severity for the framework in the Pixel bulletin. Affe...

CVE-2020-0135

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0187

In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2020-11500

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to an integer overflow in the NDEF MsgValidate function of ndef utils.c. This could lead to local information disclosure if a malformed NFC tag i...

PT-2020-11505

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btm proc sp req evt function of btm sec.cc due to a missing bounds check. This could lead to local information disclosure via compromised devi...

PT-2020-11508

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btu hcif esco connection chg evt function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure via...

CVE-2020-0154: Out-of-bounds Read

In nciproccorersp of ncihrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...