CVE-2020-0132: Out-of-bounds Read

In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2020-11497

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an integer overflow in Parcel.cpp, which can cause an out-of-bounds write. This could lead to local escalation of privilege in the system server without requiring additional...

PT-2020-11514

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the phNxpNciHal write ext function of phNxpNciHal ext.cc, which could lead to a possible out of bounds write. This could result in local escalation of...

PT-2020-11533

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the Parse art function of eas mdls.c, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional executi...

PT-2020-11561

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible UID reuse due to improper cleanup in the freeIsolatedUidLocked function of ProcessList.java. This could lead to local escalation of privilege between constrained...

PT-2020-11572

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an incorrect bounds check in the ce t4t process select file cmd function of ce t4t.cc, which could lead to a possible out of bounds read. This might result in remote information...

PT-2020-11510

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btu hcif mode change evt function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure via compromise...

PT-2020-11545

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the avrc pars browsing cmd function of avrc pars tg.cc due to a missing bounds check. This could lead to local information disclosure with no...

PT-2020-11502

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible heap disclosure due to a race condition in the OutputBuffersArray::realloc function of CCodecBuffers.cpp. This could lead to remote information disclosure, requiring...

CVE-2020-0116

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0114

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...

CVE-2020-0119

In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for...

CVE-2020-0115

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

CVE-2020-0118

In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2020-0113

In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2020-0121

In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0116

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Design/Logic Flaw

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Integer overflow

In aescmac of aescmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1...

Information disclosure

In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for...