CVE-2020-0156

CVE-2020-0156 affects Android 10 and points to an out-of-bounds read in the NxpNfc::ioctl path of NxpNfc.cpp caused by a missing bounds check. The issue enables local information disclosure with user privileges; exploitation does not require user interaction but is local in nature. CVSS metrics i...

CVE-2020-0215

CVE-2020-0215 affects Android devices via a leak in ConfirmConnectActivity.java related to a permissions bypass that exposes the Bluetooth MAC address. The vulnerability could enable local elevation of privilege to access pairing information, with user interaction required for exploitation. Affec...

EUVD-2020-1702

In exifdataloaddatacontent of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-14642894...

CVE-2020-0171

In Parselart of easmdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313223...

CVE-2020-0171

CVE-2020-0171 affects Android 10; in Parse_lart of eas_mdls.c, a missing bounds check can cause resource exhaustion leading to remote denial of service. Exploitation requires user interaction. Affected platform details are reflected in Google's Pixel bulletin (patch level 2020-06-05 or later) and...

CVE-2020-0199

In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0198

In exifdataloaddatacontent of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-14642894...

CVE-2020-0161

In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0175

In XMFReadNode of easxmf.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126380818...

CVE-2020-0163

In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2020-0137

CVE-2020-0137 is an Elevation of Privilege vulnerability in Android 10 where the code path setIPv6AddrGenMode in NetworkManagementService.java bypasses a required networking permission due to a missing permission check. This could allow a locally authenticated attacker to gain privileges with no ...

CVE-2020-0197

CVE-2020-0197 affects Android 10, caused by an out-of-bounds read in InitDataParser::parsePssh, enabling local information disclosure without user interaction. Official sources (NVD/Red Hat/NCSC and Pixel bulletin) confirm this Android Media Framework issue and list Android-10 as affected. The vu...

CVE-2020-0217

In RWT4tPresenceCheck of rwt4t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0162

In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions...

CVE-2020-0195

CVE-2020-0195 affects Google's Android Media Framework (Android 10). The vulnerability is an information disclosure in the HEVC/ivant recon CTB path (ihevcd_iquant_itrans_recon_ctb.c and related) caused by uninitialized data, potentially allowing remote information disclosure with no execution pr...

CVE-2020-0136

In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0138

In getelementattrrsp of btifrc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if bluetoothtbd were used, which it isn't in typical Android platforms, with no additional execution privileges needed. User interaction is not needed...

CVE-2020-0195

In ihevcdiquantitransreconctb of ihevcdiquantitransreconctb.c and related functions, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for...

CVE-2020-0169

In RTTTLEvent of easrtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123700383...

CVE-2020-0170

In IMYEvent of easimelody.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127310810...