CVE-2020-0393

CVE-2020-0393 affects Android during 9–11 in the Media Framework: decrypt and decrypt_1_2 in CryptoPlugin.cpp allow an out-of-bounds read due to a missing bounds check, enabling local information disclosure without user interaction. The issue is documented in multiple sources (NVD/NVD CVSS detail...

CVE-2020-0393

In decrypt and decrypt12 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

CVE-2020-0382

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2020-0074

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

PT-2020-11659

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to ineffective stack cookie placement due to stack frame double reservation in LLVM. This could lead to local escalation of privilege with no additional execution privileges needed...

PT-2020-11714

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure in libDRCdec due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed, requirin...

PT-2020-11624

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in tremolo, which could lead to an out of bounds read. This might result in remote information disclosure without requiring additional execution privileges...

PT-2020-11620

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2020-11677

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in libsonivox due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User...

PT-2020-11690

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a confused deputy in MediaProvider, which could allow bypassing a permissions check. This might lead to local information disclosure, requiring User execution privileges for...

PT-2020-11757

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libmpeg2dec, which could lead to a possible out of bounds write. This might result in local escalation of privilege if triggered with different parameter...

PT-2020-11665

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in Battery Saver due to an unsafe PendingIntent, which could lead to local information disclosure. This requires User execution privileges and does not need us...

PT-2020-11675

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in apexd due to a missing bounds check. This could lead to local information disclosure, with System execution privileges required for exploitation...

PT-2020-11670

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue concerns a missing permission check in the UsageStatsManager, potentially allowing access to protected data. This could lead to local information disclosure without requiring additional executi...

CVE-2020-0375: Missing Authorization

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0374: Incorrect Default Permissions

In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156251602...

CVE-2020-0362: Improper Input Validation

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123237930...

CVE-2020-0353: Improper Input Validation

In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777526...

CVE-2020-0351: Improper Input Validation

In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777537...

CVE-2020-0320: Improper Input Validation

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129282427...