CVE-2020-0374: Incorrect Default Permissions

In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156251602...

CVE-2020-0336: Out-of-bounds Write

In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444...

CVE-2020-0369: Integer Overflow or Wraparound

In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130231426...

CVE-2020-0358: Time-of-check Time-of-use (TOCTOU) Race Condition

In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150227563...

CVE-2020-0330: Use After Free

In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150331085...

CVE-2020-0293: Missing Authorization

In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation in Android versions: Android-11, Android ID:...

CVE-2020-0396: Undefined Security Weakness

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

PT-2020-11665

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in Battery Saver due to an unsafe PendingIntent, which could lead to local information disclosure. This requires User execution privileges and does not need us...

PT-2020-11675

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in apexd due to a missing bounds check. This could lead to local information disclosure, with System execution privileges required for exploitation...

CVE-2020-0340: Use of Uninitialized Resource

In libcodec2softmp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144901522...

PT-2020-11670

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue concerns a missing permission check in the UsageStatsManager, potentially allowing access to protected data. This could lead to local information disclosure without requiring additional executi...

CVE-2020-0364: Out-of-bounds Read

In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282770...

CVE-2020-0317: Missing Authorization

In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0344: Improper Neutralization of Special Elements used in an SQL Command

In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140729887...

CVE-2020-0275: Incorrect Default Permissions

In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This could lead to local escalation of privilege, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0345: Externally Controlled Reference to a Resource in Another Sphere

In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144286721...

PT-2020-11723

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in libAACdec due to a missing bounds check. This could lead to remote information disclosure without requiring additional execution privileges. User...

PT-2020-11713

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permissions bypass in Notification Access Confirmation due to uninformed consent. This could lead to local escalation of privilege, with the attack requiring user interaction an...

PT-2020-11667

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to missing permission checks in the AudioService, which could lead to local information disclosure of audio configuration. No additional execution privileges are needed for...

PT-2020-11774

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue allows for local information disclosure without requiring additional execution privileges. It enables viewing notifications even when the Lockdown feature is enabled. User interaction is not...