PT-2020-11706

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libmp4extractor, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional execution privileges are...

PT-2020-11711

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible use after free due to a race condition in SurfaceFlinger. This could lead to local escalation of privilege, requiring System execution privileges. User interaction is n...

PT-2020-11681

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read due to an integer overflow in the camera. This could lead to local information disclosure, with System execution privileges required for exploitation...

PT-2020-11698

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a confused deputy in DocumentsUI, which could allow a permission bypass. This might lead to local escalation of privilege without requiring additional execution privileges. User...

PT-2020-11674

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds write in the mp3 extractor due to uninitialized data. This could potentially lead to remote code execution without requiring additional execution...

PT-2020-11647

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue concerns a missing permission check in Java network APIs, potentially allowing access to sensitive network state. This could lead to local information disclosure without requiring additional...

PT-2020-11722

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an integer overflow in libavb, which can cause an out of bounds write. This could potentially lead to a local escalation of privilege, and no additional execution privileges are...

PT-2020-11689

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to possible memory corruption due to type confusion in SurfaceFlinger. This could lead to local escalation of privilege, requiring System execution privileges. User interaction is no...

CVE-2020-0340: Use of Uninitialized Resource

In libcodec2softmp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144901522...

PT-2020-11693

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure in the libcodec2 soft mp3dec component due to uninitialized data. This could lead to remote information disclosure without requiring additional...

PT-2020-11699

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an integer overflow in Mediaserver, which could lead to a possible out of bounds write. This might result in local escalation of privilege if integer sanitization were not enabled...

PT-2020-11708

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libFraunhoferAAC, which could lead to a possible out of bounds read. This might result in remote information disclosure without requiring additional...

PT-2020-11657

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible use after free due to improper locking in the Media extractor. This could lead to remote code execution in the media extractor with no additional execution privileges...

PT-2020-11643

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for...

PT-2020-11694

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in DisplayManager due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2020-11712

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a buffer overflow in the GLESRenderEngine, which could lead to a possible out of bounds read. This might result in local information disclosure without requiring additional...

PT-2020-11775

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in the SyncManager due to an unsafe PendingIntent. This could lead to local information disclosure without requiring additional execution privileges. User...

Android 11 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.

This Android Security Release Notes contains details of security vulnerabilities affecting Android devices which are addressed as part of Android 11. Android 11 devices with a security patch level of 2020-09-01 or later are protected against these issues Android 11, as released on AOSP, has a...

CVE-2020-0213

In hevcdfmtconv420spto420spav8 of ihevcdfmtconv420spto420sp.s, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

CVE-2020-0202

In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...