PT-2020-11661

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in the Window Manager due to an unsafe PendingIntent. This could lead to local information disclosure, requiring User execution privileges for exploitation...

PT-2020-11651

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in the devicepolicy service due to an unsafe PendingIntent. This could lead to local information disclosure, requiring User execution privileges for...

PT-2020-11650

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-11 Description The issue is related to a possible permission bypass in the ADB server and USB server due to an unsafe PendingIntent. This could lead to local information disclosure, requiring User execution...

PT-2020-11665

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in Battery Saver due to an unsafe PendingIntent, which could lead to local information disclosure. This requires User execution privileges and does not need us...

CVE-2020-0374: Incorrect Default Permissions

In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156251602...

CVE-2020-0426: Undefined Security Weakness

In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154921790...

CVE-2020-0312: Undefined Security Weakness

In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153879099...

CVE-2020-0308: Undefined Security Weakness

In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357...

CVE-2020-0297: Undefined Security Weakness

In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155183624...

CVE-2020-0296: Undefined Security Weakness

In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153356209...

CVE-2020-0389: Undefined Security Weakness

In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2020-0388: Incorrect Default Permissions

In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0396: Undefined Security Weakness

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

CVE-2020-0397: Undefined Security Weakness

In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0395: Undefined Security Weakness

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0399: Undefined Security Weakness

In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2020-11775

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in the SyncManager due to an unsafe PendingIntent. This could lead to local information disclosure without requiring additional execution privileges. User...

PT-2020-11727

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an unsafe PendingIntent in NFC, which could allow a permission bypass. This might lead to a local escalation of privilege, requiring User execution privileges. Notably, user...

PT-2020-11749

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description The issue is related to a permission bypass in Telephony due to an unsafe PendingIntent, potentially leading to local information disclosure. This requires User execution privileges and does not need...

PT-2020-11752

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description The issue is related to a possible permission bypass due to an unsafe PendingIntent in the showLimitedSimFunctionWarningNotification function of NotificationMgr.java. This could lead to local...