CVE-2020-0128

In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0209

CVE-2020-0209 affects Android 10 Framework (AccountManager.java). Description: permissions bypass in multiple AccountManager functions could enable local elevation of privilege without additional execution privileges required; exploitation requires no user interaction. Evidence across documents s...

CVE-2020-0127

In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersion...

CVE-2020-0134

In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0191

In ih264dupdatedefaultindexlist of ih264ddpbmgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android...

CVE-2020-0208

CVE-2020-0208 affects Android Framework, specifically in multiple functions of AccountManager.java, where a permissions bypass could enable local privilege escalation with no additional execution privileges needed and without user interaction. The vulnerability is reflected in multiple sources: N...

CVE-2020-0208

In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145207098...

CVE-2020-0203

In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0203

CVE-2020-0203 affects Android 10 Framework: a bug in freeIsolatedUidLocked within ProcessList.java can cause UID reuse from improper cleanup, enabling local privilege escalation between constrained processes with no extra privileges and no user interaction required. The Pixel Update Bulletin list...

CVE-2020-0187

In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2020-11577

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible insecure Intent in the onCreate of SliceDeepLinkSpringBoard.java. This could lead to local elevation of privilege with no additional execution privileges needed. User...

PT-2020-11487

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible use after free due to a race condition in multiple functions in DrmPlugin.cpp. This could lead to local code execution with System execution privileges required. User...

PT-2020-11565

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the next marker function of jdmarker.c due to improper input validation. This could lead to remote information disclosure without requiring...

PT-2020-11539

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing permission check in the getAllConfigFlags function of SettingsProvider.cpp. This could lead to local information disclosure of config flags without requiring additional...

PT-2020-11556

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the parsePssh function of InitDataParser.cpp, which can lead to a possible out of bounds read. This could result in local information disclosure without...

PT-2020-11538

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible permissions bypass in the connect function of PanService.java. This could lead to local escalation of privilege, allowing changes to network connection settings without...

PT-2020-11548

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion due to an infinite loop in the ihevcd decode function of ihevcd decode.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11513

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c, which could lead to a possible out of bounds read. This might result in local information...

PT-2020-11518

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the nfa hci conn cback function of nfa hci main.cc. This could lead to remote information disclosure via compromised device firmware, requiring...

PT-2020-11569

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the SumCompoundHorizontalTaps function of convolve neon.cc, which could lead to a possible out of bounds read. This might result in remote information...