PT-2020-11507

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btu hcif hardware error evt function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure via...

PT-2020-11509

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-10 Description The issue is related to a possible out of bounds read in the btu hcif pin code request evt, btu hcif link key request evt, and btu hcif link key notification evt functions of btu hcif.cc. This...

PT-2020-11510

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btu hcif mode change evt function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure via compromise...

CVE-2020-0151: Out-of-bounds Read

In avbvbmetaimageverify of avbvbmetaimage.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android...

PT-2020-11528

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to an integer overflow in the load of ResourceTypes.cpp. This could lead to local information disclosure with no additional execution privileges...

CVE-2020-0197: Out-of-bounds Read

In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0167: Out-of-bounds Read

In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-129475100...

CVE-2020-0185: Out-of-bounds Read

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Androi...

PT-2020-11519

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the nfc ncif proc t3t polling ntf function of nfc ncif.cc due to a missing bounds check. This could lead to local information disclosure, requirin...

PT-2020-11512

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible out of bounds read due to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c could lead to a local information disclosure. This issue requires System executio...

CVE-2020-0182: Out-of-bounds Read

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

PT-2020-11506

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btm simple pair complete function of btm sec.cc due to a missing bounds check. This could lead to local information disclosure via compromised...

PT-2020-11539

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing permission check in the getAllConfigFlags function of SettingsProvider.cpp. This could lead to local information disclosure of config flags without requiring additional...

CVE-2020-0152: Out-of-bounds Read

In avbvbmetaimageverify of avbvbmetaimage.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

CVE-2020-0139: Out-of-bounds Read

In NDEFMsgValidate of ndefutils.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. System execution privileges are needed and user interaction is not needed for...

CVE-2020-0148: Out-of-bounds Read

In btuhcifpincoderequestevt, btuhciflinkkeyrequestevt, and btuhciflinkkeynotificationevt of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. Us...

CVE-2020-0158: Out-of-bounds Read

In nfcncifproct3tpollingntf of nfcncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0156: Out-of-bounds Read

In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736127...

CVE-2020-0144: Out-of-bounds Read

In btmprocspreqevt of btmsec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0178: Missing Authorization

In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This could lead to local information disclosure of config flags with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...