PT-2020-11525

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the phNxpNciHal NfcDep cmd ext function of phNxpNciHal NfcDepSWPrio.cc. This could lead to local information disclosure, requiring System executio...

PT-2020-11528

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to an integer overflow in the load of ResourceTypes.cpp. This could lead to local information disclosure with no additional execution privileges...

PT-2020-11543

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an incomplete reset in the handleMessage of BluetoothManagerService. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2020-11534

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to possible resource exhaustion due to improper input validation in the Parse lins function of eas mdls.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11570

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to a use after free in the onBufferDestroyed function of InputBufferManager.cpp. This could lead to remote information disclosure with no...

PT-2020-11532

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion due to a missing bounds check in the Parse lart function of eas mdls.c. This could lead to a remote denial of service, and no additional execution...

PT-2020-11567

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A permissions bypass issue exists in multiple functions of AccountManager.java. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

PT-2020-11519

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the nfc ncif proc t3t polling ntf function of nfc ncif.cc due to a missing bounds check. This could lead to local information disclosure, requirin...

PT-2020-11564

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to improper input validation in the settings app, which can cause the app to crash. This could lead to a local denial of service of the Settings app, requiring User execution...

PT-2020-11502

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible heap disclosure due to a race condition in the OutputBuffersArray::realloc function of CCodecBuffers.cpp. This could lead to remote information disclosure, requiring...

PT-2020-11522

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to possible resource exhaustion due to improper input validation in the parseChunk function of MPEG4Extractor.cpp. This could lead to a remote denial of service, and no additional...

PT-2020-11497

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an integer overflow in Parcel.cpp, which can cause an out-of-bounds write. This could lead to local escalation of privilege in the system server without requiring additional...

PT-2020-11512

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible out of bounds read due to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c could lead to a local information disclosure. This issue requires System executio...

PT-2020-11496

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible backup metadata exposure exists due to a missing permission check in the RollbackManagerServiceImpl.java dump. This could lead to local information disclosure, requiring System execution...

PT-2020-11537

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out-of-bounds read in the avdt msg prs rej function of avdt msg.cc due to improper input validation. This could lead to remote information disclosure without requiring...

PT-2020-11511

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the rw t3t message set block list function of rw t3t.cc, which could lead to a possible out of bounds write. This could result in local escalation of...

PT-2020-11523

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to improper input validation in the parseSampleAuxiliaryInformationOffsets function of MPEG4Extractor.cpp. This could lead to resource exhaustion, resulting in a remote denial of...

PT-2020-11554

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to uninitialized data in the ihevcd iquant itrans recon ctb function of ihevcd iquant itrans recon ctb.c and related functions, which could lead to remote information disclosure...

PT-2020-11498

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A missing permission check in the setIPv6AddrGenMode function of NetworkManagementService.java could allow a bypass of networking permissions. This issue may lead to local escalation of privilege without...

CVE-2020-0126: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930...