Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-32928)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by attackers to obtain sensitive information...

Google Android Media Framework Denial of Service Vulnerability (CNVD-2020-46272)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. A security vulnerability exists in Media Framework in Android version 10. An attacker could exploit this vulnerability t...

Google Android System Buffer Overflow Vulnerability (CNVD-2020-33222)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by an attacker to gain access to information...

Google Android System Component Elevation of Privilege Vulnerability (CNVD-2020-36704)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in the System component of Android version 10.0. The vulnerability can be exploited by an attacker to elevate...

Google Android System Component Code Execution Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in the System component of Android version 10, which can be exploited by remote attackers to execute code...

Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-32935)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by attackers to obtain sensitive information...

Google Android System elevation of privilege vulnerability (CNVD-2020-33223)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by an attacker to elevate privileges...

Google Android Media Framework Input Validation Error Vulnerability (CNVD-2020-36926)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. A security vulnerability exists in Media Framework in Android version 10. The vulnerability can be exploited by an...

Google Android System Component Elevation of Privilege Vulnerability (CNVD-2020-33226)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in the System component of Android version 10, which can be exploited by an attacker to elevate privileges...

Google Android Media framework information disclosure vulnerability (CNVD-2020-31525)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Media framework component of Google Android 9 and 10. An attacker can exploit this vulnerability to obtain...

Google Android Media framework elevation of privilege vulnerability (CNVD-2020-31526)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Media framework component of Google Android 10. An attacker can exploit this vulnerability to elevate privileg...

Google Android Framework Information Disclosure Vulnerability (CNVD-2020-31527)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Framework component of Google Android 10. An attacker can exploit the vulnerability to obtain sensitive...

PT-2020-3580 · Google +4 · Android +4

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 Description: The issue is related to a use-after-free vulnerability in the cdev get function of char dev.c due to a race condition. This could lead to local escalation of privilege with System execution privileges...

CVE-2020-0106

In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0103

In a2dpaacdecodercleanup of a2dpaacdecoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android...

CVE-2020-0105

In onKeyguardVisibilityChanged of keystoreservice.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps to use keyguard-bound keys when the screen is locked, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0109

In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVE-2020-0101

In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1...

DEBIAN-CVE-2020-0093

In exifdatasavedataentry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0...

CVE-2020-0094

In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...