CVE-2020-0043: Out-of-bounds Read

In authorizeenrol of fpctahwauth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2020-0029: Exposure of Sensitive Information to an Unauthorized Actor

In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a factory reset. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0031: Exposure of Sensitive Information to an Unauthorized Actor

In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed f...

PT-2020-11413

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible stack information leak due to uninitialized data in the onTransact function of IAudioFlinger.cpp. This could lead to local information disclosure with no additional...

PT-2020-11425

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btm ble batchscan filter track adv vse cback function of btm ble batchscan.cc. This could lead to local information disclosure without requiri...

PT-2020-11407

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the fpc ta hw auth unwrap key function of fpc ta hw auth qsee.c. This could lead to local information disclosure, requiring System execution privileges for...

CVE-2020-0035: Missing Authorization

In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

PT-2020-6987

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description The issue is related to a possible out of bounds read in the exif data save data entry function of exif-data.c due to a missing bounds check. This could lead to local information disclosure with no...

OpenSMTPD Local Information Disclosure Vulnerability

OpenSMTPD is a free server-side implementation of the SMTP protocol , and provides some additional standard extensions . OpenSMTPD suffers from a local information disclosure vulnerability. A local attacker can exploit the vulnerability to read arbitrary files...

OpenSMTPD 6.6.3 - Arbitrary File Read

Title: OpenSMTPD 6.6.3 - Arbitrary File Read Date: 2020-02-20 Author: qualys Vendor: https://www.opensmtpd.org/ CVE: 2020-8793 / Local information disclosure in OpenSMTPD CVE-2020-8793 Copyright C 2020 Qualys, Inc. This program is free software: you can redistribute it and/or modify it under the...

OpenSMTPD 6.6.3 - Arbitrary File Read

OpenSMTPD 6.6.3 - Arbitrary File Read Title: OpenSMTPD 6.6.3 - Arbitrary File Read Date: 2020-02-20 Author: qualys Vendor: https://www.opensmtpd.org/ CVE: 2020-8793 / Local information disclosure in OpenSMTPD CVE-2020-8793 Copyright C 2020 Qualys, Inc. This program is free software: you can...

OpenSMTPd -- Local information disclosure

Qualys reports: We discovered a minor vulnerability in OpenSMTPD, OpenBSD's mail server: an unprivileged local attacker can read the first line of an arbitrary file for example, root's password hash in /etc/master.passwd or the entire contents of another user's file if this file and...

CVE-2014-4659: Insufficiently Protected Credentials

Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format...

CVE-2020-0017

In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8...

CVE-2020-0023

In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This could lead to local information disclosure if a malicious app enables contacts over a bluetooth connection, with User execution privileges...

CVE-2020-0023

CVE-2020-0023 affects Android 10 and is described as a local information disclosure in which a Bluetooth-enabled app could access user contacts due to a missing permission check in AdapterService.java. The vulnerability occurs in setPhonebookAccessPermission and could allow a malicious app to dis...

CVE-2020-0017

In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8...

CVE-2020-0017

In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8...

PT-2020-11389

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a failure to properly redact location information from media files due to an incorrect bounds check in the getAttributeRange function of ExifInterface.java. This could lead to loc...

PT-2020-11386

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description The issue allows the primary user's dictionary to be visible to and modifiable by secondary users, potentially leading to local information disclosure. No additional execution privileges are needed,...