CVE-2020-0426: Undefined Security Weakness

In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154921790...

CVE-2020-0322: Out-of-bounds Read

In apexd, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002540...

CVE-2020-0369: Integer Overflow or Wraparound

In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130231426...

CVE-2020-0345: Externally Controlled Reference to a Resource in Another Sphere

In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144286721...

CVE-2020-0275: Incorrect Default Permissions

In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This could lead to local escalation of privilege, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0330: Use After Free

In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150331085...

CVE-2020-0396: Undefined Security Weakness

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

CVE-2020-0317: Missing Authorization

In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

PT-2020-11723

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in libAACdec due to a missing bounds check. This could lead to remote information disclosure without requiring additional execution privileges. User...

PT-2020-11713

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permissions bypass in Notification Access Confirmation due to uninformed consent. This could lead to local escalation of privilege, with the attack requiring user interaction an...

PT-2020-11667

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to missing permission checks in the AudioService, which could lead to local information disclosure of audio configuration. No additional execution privileges are needed for...

PT-2020-11774

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue allows for local information disclosure without requiring additional execution privileges. It enables viewing notifications even when the Lockdown feature is enabled. User interaction is not...

PT-2020-11641

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible resource exhaustion due to a missing bounds check in libmkvextractor. This could lead to remote denial of service with no additional execution privileges needed. User...

PT-2020-11725

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing permission check in ActivityManager, which could allow access to protected data. This might lead to local information disclosure without requiring additional execution...

PT-2020-11715

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to improper input validation in libstagefright, which can cause resource exhaustion. This could lead to a remote denial of service, and no additional execution privileges are needed...

CVE-2020-0289: Missing Authorization

In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996872...

PT-2020-11697

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permissions bypass due to SQL injection in MediaProvider. This could lead to local information disclosure without requiring additional execution privileges. User interaction is...

PT-2020-11673

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to improper input validation in libstagefright, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional execution privileges are...

PT-2020-11676

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libavb, which could lead to a possible out of bounds read. This might result in local information disclosure without requiring additional execution...

PT-2020-11686

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to improper input validation in the UrlQuerySanitizer. This could lead to remote code execution with no additional execution privileges needed. User interaction is not required for...