CVE-2020-27028

In filterincomingevent of hcilayer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27023

In setErrorPlaybackState of BluetoothMediaBrowserService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-27021

In avrcctrlparsvendorcmd of avrcparstg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0484

CVE-2020-0484 describes a memory corruption vulnerability caused by a use-after-free in the Android component’s ComposerClient.h destroyResources. The issue could allow local elevation of privilege , requiring no user interaction for exploitation and potentially enabling execution with system-lev...

CVE-2020-0483

In DrmManagerService::DrmManagerService of DrmManagerService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0483

CVE-2020-0483 affects DrmManagerService in Android-11. The issue is a memory corruption via a use-after-free in the DrmManagerService destructor (DrmManagerService.cpp), enabling local elevation of privilege with System execution privileges required. User interaction is not needed. The descriptio...

CVE-2020-0482

In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0476

In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0476

CVE-2020-0476 describes a vulnerability in Android 11 where, in onNotificationRemoved of Assistant.java, sensitive information could leak to logs, enabling local information disclosure without user interaction (privilege: System execution required). Affects Android-11 devices per the initial desc...

PT-2020-11817

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User...

CVE-2020-27067

In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152409173...

CVE-2020-27046: Out-of-bounds Read

In nfcncifproceeaction of nfcncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27033: Out-of-bounds Read

In nfcncifprocgetrouting of nfcncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27028: Out-of-bounds Read

In filterincomingevent of hcilayer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27021: Out-of-bounds Read

In avrcctrlparsvendorcmd of avrcparstg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0482: Out-of-bounds Read

In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

PT-2020-16614

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-11 Description The issue is related to a possible out of bounds read in the NFC server due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed, an...

PT-2020-16619

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the nfc enabled function of nfc main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmware with System execution...

PT-2020-16608

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the nfc data event function of nfc ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges neede...

PT-2020-16599

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in the avrc ctrl pars vendor cmd function of avrc pars tg.cc due to a missing bounds check. This could lead to local information disclosure with Syst...