PT-2020-16628

Name of the Vulnerable Software and Affected Versions Android version Android-11 Description The issue is related to a permissions bypass in the getLockTaskLaunchMode function of ActivityRecord.java. This could allow any app to start in Lock Task Mode, potentially leading to local escalation of...

PT-2020-16611

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible permission bypass due to an unsafe PendingIntent in the createSimSelectNotification function of SimSelectNotification.java. This could lead to local information...

PT-2020-16616

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible permission bypass due to an unsafe PendingIntent in the postNotification of ServiceRecord.java. This could lead to local information disclosure with User execution...

PT-2020-16620

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible memory corruption due to a use after free in the restartWrite function of Parcel.cpp. This could lead to local escalation of privilege with no additional execution...

PT-2020-16606

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to improper input validation in the TextView of TextView.java, which could lead to an app hang and result in a remote denial of service. No additional execution privileges are needed...

PT-2020-16601

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the smp br state machine event function of smp br main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure triggered by a malform...

PT-2020-16599

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in the avrc ctrl pars vendor cmd function of avrc pars tg.cc due to a missing bounds check. This could lead to local information disclosure with Syst...

PT-2020-16625

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds write in the rw t3t send raw frame function of rw t3t.cc due to a missing bounds check. This could lead to local escalation of privilege with no additiona...

PT-2020-16604

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in the nfc ncif proc get routing function of nfc ncif.cc, which could lead to a possible out of bounds read. This might result in local information disclosu...

PT-2020-16607

Name of the Vulnerable Software and Affected Versions Android version Android-11 Description In the onCreate method of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege, allowing an app to set or dismiss the alarm...

PT-2020-16632

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In SELinux policies of mls, there is a missing permission check. This could lead to local information disclosure of package metadata with no additional execution privileges needed. User interaction is no...

PT-2020-16600

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible permission bypass in the BluetoothMediaBrowserService.java due to an unsafe PendingIntent. This could lead to local information disclosure, requiring System execution...

PT-2020-16624

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds write due to a missing bounds check in the RW SendRawFrame function of rw main.cc. This could lead to local escalation of privilege with no additional...

PT-2020-16623

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in the ce t4t update binary function of ce t4t.cc, which could lead to a possible out of bounds read. This might result in local information disclosure...

PT-2020-16609

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing permission check in the getRadioAccessFamily function of PhoneInterfaceManager.java. This could lead to local information disclosure of radio data with no additional...

PT-2020-16617

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read due to a missing bounds check in the phNxpNciHal core initialized function of phNxpNciHal.cc. This could lead to local information disclosure in the...

PT-2020-16629

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible location permission bypass due to a missing permission check in the broadcastWifiCredentialChanged function of ClientModeImpl.java. This could lead to local information...

PT-2020-16608

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the nfc data event function of nfc ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges neede...

PT-2020-16618

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an unsafe PendingIntent in the showProvisioningNotification function of ConnectivityService.java. This could lead to local information disclosure of notification data without...

PT-2020-11811

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the onNotificationRemoved function of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges...