CVE-2020-0059

In btmblebatchscanfiltertrackadvvsecback of btmblebatchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0058

In l2crcvacldata of l2cmain.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0036

In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0031

Technical details for CVE-2020-0031 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-0031

In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed f...

PT-2020-11397

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue concerns the storage of location history in the WifiConfigManager, which can only be deleted by performing a factory reset. This could lead to local information disclosure, requiring System...

PT-2020-11425

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btm ble batchscan filter track adv vse cback function of btm ble batchscan.cc. This could lead to local information disclosure without requiri...

PT-2020-11422

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btu hcif connection comp evt function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure with no...

PT-2020-11413

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible stack information leak due to uninitialized data in the onTransact function of IAudioFlinger.cpp. This could lead to local information disclosure with no additional...

PT-2020-11417

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible tapjacking attack in the onCreate of SettingsHomepageActivity. This could lead to local escalation of privilege in Settings with no additional execution privileges...

PT-2020-11418

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a permissions bypass in the smsSelected function of AnswerFragment.java, allowing an SMS to be sent from the lock screen. This could lead to a local escalation of privilege on the...

PT-2020-11411

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a heap buffer overflow in the DrmPlugin::releaseSecureStops function of DrmPlugin.cpp. This could lead to a local escalation of privilege with no additional execution privileges...

PT-2020-11448

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A logic error in the setRequirePmfInternal function of sta network.cpp could lead to a default value being improperly applied, resulting in a remote denial of service. No additional execution privileges...

PT-2020-11452

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the getProcessPss function of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution...

PT-2020-11412

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A missing permission check in the setMasterMute function of AudioService.java could allow local silencing of audio without requiring additional execution privileges. User interaction is not necessary for...

PT-2020-11399

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue concerns the inappropriate display of sensitive information by Augmented Autofill, potentially leading to local information disclosure without requiring additional execution privileges. User...

PT-2020-11419

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds write due to a missing bounds check in the convertHidlNanDataPathInitiatorRequestToLegacy and convertHidlNanDataPathIndicationResponseToLegacy functions o...

PT-2020-11421

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the l2c link process num completed pkts function of l2c link.cc due to a missing bounds check. This could lead to local information disclosure wit...

PT-2020-11424

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the l2c rcv acl data function of l2c main.cc. This could lead to local information disclosure, requiring System execution privileges for...

PT-2020-11410

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible memory corruption due to a race condition in the StatsService::command of StatsService.cpp. This could lead to local escalation of privilege, with System execution...