Design/Logic Flaw

This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450...

CVE-2020-0232

CVE-2020-0232 is reported in the Android kernel (Airbrush component). The issue arises when abc_pcie_issue_dma_xfer_sync creates a transfer object, stores it in a session, and a concurrent thread can fetch that object and delete it via abc_pcie_dma_user_xfer_clean. If this occurs, the original th...

CVE-2020-0232

Function abcpcieissuedmaxfersync creates a transfer object, adds it to the session object then continues to work with it. A concurrent thread could retrieve created transfer object from the session object and delete it using abcpciedmauserxferclean. If this happens, abcpciestartdmaxfer and...

CVE-2020-0234

In crusafegetparam of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2020-0232: Use After Free

Function abcpcieissuedmaxfersync creates a transfer object, adds it to the session object then continues to work with it. A concurrent thread could retrieve created transfer object from the session object and delete it using abcpciedmauserxferclean. If this happens, abcpciestartdmaxfer and...

CVE-2020-0234: Out-of-bounds Write

In crusafegetparam of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2020-0223: Out-of-bounds Write

This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450...

PT-2020-11580

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is an unbounded write into kernel global memory. This occurs via a user-controlled buffer size, allowing potential exploitation. No information is provided about the...

PT-2020-11592

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue arises in the crus sp shared ioctl function where 4 bytes from user data are copied into the size variable. This variable is then used as the size parameter for copy from user, resulting in the overwrite of...

CVE-2020-0235: Out-of-bounds Write

In crusspsharedioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the size parameter for "copyfromuser", ending up overwriting memory following "crussphdr". "crussphdr" is a static variable, of type "struct crusspioctlheader".Product: AndroidVersions:...

PT-2020-11591

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the crus afe get param function of msm-cirrus-playback.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege with ...

PT-2020-11589

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue arises from the function abc pcie issue dma xfer sync creating a transfer object, adding it to the session object, and then continuing to work with it. A concurrent thread could retrieve the created transfe...

CVE-2020-0233

In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150225255...

CVE-2020-0233

In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150225255...

Memory corruption

In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150225255...

CVE-2020-0233

In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150225255...

PT-2020-11590

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to possible memory corruption due to a use after free in the main.cpp file. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...

CVE-2020-0233: Use After Free

In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150225255...

Google Android Kernel Audio Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Kernel Audio is one of the kernel audio components. A security vulnerability exists in the Kernel Audio component of Android. An attacker can exploit this vulnerability to elevate...

Google Android Kernel Airbrush Resource Management Error Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, of which Kernel Airbrush is a kernel image processing plug-in. The Google Android Kernel Airbrush resource management error vulnerability can be exploited by an attacker to elevate privileges...