PT-2020-11532

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion due to a missing bounds check in the Parse lart function of eas mdls.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11567

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A permissions bypass issue exists in multiple functions of AccountManager.java. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

PT-2020-11519

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the nfc ncif proc t3t polling ntf function of nfc ncif.cc due to a missing bounds check. This could lead to local information disclosure, requirin...

PT-2020-11522

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to possible resource exhaustion due to improper input validation in the parseChunk function of MPEG4Extractor.cpp. This could lead to a remote denial of service, and no additional...

PT-2020-11512

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible out of bounds read due to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c could lead to a local information disclosure. This issue requires System executio...

PT-2020-11496

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible backup metadata exposure exists due to a missing permission check in the RollbackManagerServiceImpl.java dump. This could lead to local information disclosure, requiring System execution...

PT-2020-11537

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out-of-bounds read in the avdt msg prs rej function of avdt msg.cc due to improper input validation. This could lead to remote information disclosure without requiring...

PT-2020-11523

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to improper input validation in the parseSampleAuxiliaryInformationOffsets function of MPEG4Extractor.cpp. This could lead to resource exhaustion, resulting in a remote denial of...

PT-2020-11538

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible permissions bypass in the connect function of PanService.java. This could lead to local escalation of privilege, allowing changes to network connection settings without...

PT-2020-11539

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing permission check in the getAllConfigFlags function of SettingsProvider.cpp. This could lead to local information disclosure of config flags without requiring additional...

PT-2020-11489

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the addPacket function of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges...

PT-2020-11494

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a permissions bypass in MockLocationAppPreferenceController.java, allowing the mocking of a device's GPS location. This could lead to local escalation of privilege, requiring User...

PT-2020-11487

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible use after free due to a race condition in multiple functions in DrmPlugin.cpp. This could lead to local code execution with System execution privileges required. User...

PT-2020-11498

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A missing permission check in the setIPv6AddrGenMode function of NetworkManagementService.java could allow a bypass of networking permissions. This issue may lead to local escalation of privilege without...

CVE-2020-0126: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930...

CVE-2020-0219: NULL Pointer Dereference

In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-122836081...

CVE-2020-0169: Improper Input Validation

In RTTTLEvent of easrtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123700383...

CVE-2020-0218: Concurrent Execution using Shared Resource with Improper Synchronization

In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2020-11557

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible use-after-free due to a race condition exists in TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp. This could lead to local information disclosure with System execution privileges neede...

PT-2020-11493

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to unsafe deserialization in BnAAudioService::onTransact of IAAudioService.cpp. This could lead to local information disclosure with no additiona...