PT-2020-16608

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the nfc data event function of nfc ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges neede...

PT-2020-16618

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to an unsafe PendingIntent in the showProvisioningNotification function of ConnectivityService.java. This could lead to local information disclosure of notification data without...

PT-2020-11811

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the onNotificationRemoved function of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges...

PT-2020-11825

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in the floor1 info unpack function of floor1.c due to a missing bounds check. This could lead to remote information disclosure with no additional...

PT-2020-11814

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible permissions bypass in the callUnchecked method of DocumentsProvider.java. This could lead to local escalation of privilege, allowing a malicious app to access files...

PT-2020-11818

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description A memory corruption issue exists due to a use after free in the DrmManagerService::DrmManagerService function of DrmManagerService.cpp. This could lead to local escalation of privilege, requiring System...

PT-2020-11812

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing permission check in the sendLinkConfigurationChangedBroadcast function of ClientModeImpl.java. This could lead to local information disclosure of the current network...

PT-2020-11819

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to possible memory corruption due to a use after free in the destroyResources function of ComposerClient.h. This could lead to local escalation of privilege with System execution...

PT-2020-11820

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In the areFunctionsSupported function of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This could lead to local escalation of privilege...

PT-2020-11810

Name of the Vulnerable Software and Affected Versions Android version Android-11 Description The issue is related to a missing permission check in the createInputConsumer function of WindowManagerService.java. This could allow an attacker to block and intercept input events, potentially leading t...

PT-2020-11831

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description A memory corruption issue due to a use-after-free in the CPDF RenderStatus::LoadSMask function of cpdf renderstatus.cpp could lead to local information disclosure. This issue does not require additional...

PT-2020-11832

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing permission check in the canUseBiometric function of BiometricServiceBase. This could lead to local information disclosure without requiring additional execution...

PT-2020-11834

Name of the Vulnerable Software and Affected Versions Android version Android-11 Description In the startInputUncheckedLocked function of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User...

CVE-2020-27041: Undefined Security Weakness

In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This could lead to local information disclosure of notification data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0493: Improper Input Validation

In CPDFSampledFunc::vCall of cpdfsampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0488: Exposure of Sensitive Information to an Unauthorized Actor

In ihevcinterpredchromacopyssse3 of ihevcinterpredfiltersssse3intr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0486: Incorrect Default Permissions

In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege to change contact data with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0474: Concurrent Execution using Shared Resource with Improper Synchronization

In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

PT-2020-11823

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure due to uninitialized data in the ihevc inter pred chroma copy ssse3 function of ihevc inter pred filters ssse3 intr.c. This could lead to remote...

PT-2020-16603

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The device unlock interface behaves differently during boot depending on the presence of a registered fingerprint, potentially leading to local information disclosure without requiring additional executi...