CVE-2020-0058

In l2crcvacldata of l2cmain.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0043

In authorizeenrol of fpctahwauth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2020-0043

CVE-2020-0043 involves the FPC Fingerprint TEE on Android. In authorize_enrol of fpc_ta_hw_auth.c there is a missing bounds check causing an out-of-bounds read, leading to possible local information disclosure with system privileges and no user interaction required. Affected class: Android kernel...

CVE-2020-0042

In fpctahwauthunwrapkey of fpctahwauthqsee.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2020-0035

In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

CVE-2020-0031

Technical details for CVE-2020-0031 are not publicly provided in the supplied documents. Monitor for updates.

PT-2020-11397

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue concerns the storage of location history in the WifiConfigManager, which can only be deleted by performing a factory reset. This could lead to local information disclosure, requiring System...

CVE-2020-0059: Out-of-bounds Read

In btmblebatchscanfiltertrackadvvsecback of btmblebatchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2020-11402

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9 Description The issue concerns a missing permission check in the TelephonyProvider.java query, potentially allowing access to SIM card information. This could lead to local information disclosure without requirin...

PT-2020-11399

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue concerns the inappropriate display of sensitive information by Augmented Autofill, potentially leading to local information disclosure without requiring additional execution privileges. User...

PT-2020-11426

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible permission bypass due to SQL injection in SmsProvider.java and MmsSmsProvider.java. This could lead to local information disclosure, with System execution privileges...

CVE-2020-0055: Out-of-bounds Read

In l2clinkprocessnumcompletedpkts of l2clink.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0048: Use of Uninitialized Resource

In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0061: Undefined Security Weakness

In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2020-0060: Improper Neutralization of Special Elements used in an SQL Command

In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID...

PT-2020-11424

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the l2c rcv acl data function of l2c main.cc. This could lead to local information disclosure, requiring System execution privileges for...

CVE-2020-0058: Out-of-bounds Read

In l2crcvacldata of l2cmain.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0056: Out-of-bounds Read

In btuhcifconnectioncompevt of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0044: Out-of-bounds Read

In setnonce of fpctaqcauth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137650...

CVE-2020-0042: Out-of-bounds Read

In fpctahwauthunwrapkey of fpctahwauthqsee.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...