PT-2020-11681

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read due to an integer overflow in the camera. This could lead to local information disclosure, with System execution privileges required for exploitation...

CVE-2020-0270: Out-of-bounds Read

In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145790628...

PT-2020-11694

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in DisplayManager due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2020-11712

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a buffer overflow in the GLESRenderEngine, which could lead to a possible out of bounds read. This might result in local information disclosure without requiring additional...

PT-2020-11775

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in the SyncManager due to an unsafe PendingIntent. This could lead to local information disclosure without requiring additional execution privileges. User...

PT-2020-11699

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an integer overflow in Mediaserver, which could lead to a possible out of bounds write. This might result in local escalation of privilege if integer sanitization were not enabled...

PT-2020-11657

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible use after free due to improper locking in the Media extractor. This could lead to remote code execution in the media extractor with no additional execution privileges...

PT-2020-11698

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a confused deputy in DocumentsUI, which could allow a permission bypass. This might lead to local escalation of privilege without requiring additional execution privileges. User...

CVE-2020-0374: Incorrect Default Permissions

In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156251602...

CVE-2020-0324: Out-of-bounds Read

In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136660304...

CVE-2020-0355: Out-of-bounds Read

In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141883493...

CVE-2020-0341: Missing Authorization

In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144920149...

PT-2020-11708

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libFraunhoferAAC, which could lead to a possible out of bounds read. This might result in remote information disclosure without requiring additional...

CVE-2020-0352: Improper Neutralization of Special Elements used in an SQL Command

In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-132074310...

PT-2020-11620

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2020-11643

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for...

PT-2020-11644

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description A missing permission check in PackageManager could lead to local information disclosure across users. No additional execution privileges are needed, and user interaction is not required for exploitation...

Android 11 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.

This Android Security Release Notes contains details of security vulnerabilities affecting Android devices which are addressed as part of Android 11. Android 11 devices with a security patch level of 2020-09-01 or later are protected against these issues Android 11, as released on AOSP, has a...

CVE-2020-0213

In hevcdfmtconv420spto420spav8 of ihevcdfmtconv420spto420sp.s, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

CVE-2020-0202

In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...