CVE-2020-0096

In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Out-of-bounds

In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

CVE-2018-7910

CVE-2018-7910 applies to several Huawei smartphones (e.g., ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C) running Android 8.x with builds such as 8.0.0.118D(C00/ C01), 8.0.0.127/128/137(C432). The flaw is an authentication bypass that lets an attacker replace the boot/startup program when t...