CVE-2020-0364: Out-of-bounds Read

In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282770...

CVE-2020-0361: Use of Uninitialized Resource

In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151927433...

CVE-2020-0344: Improper Neutralization of Special Elements used in an SQL Command

In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140729887...

CVE-2020-0340: Use of Uninitialized Resource

In libcodec2softmp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144901522...

CVE-2020-0324: Out-of-bounds Read

In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136660304...

CVE-2020-0314: Missing Authorization

In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934920...

CVE-2020-0270: Out-of-bounds Read

In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145790628...

CVE-2020-0406: Out-of-bounds Write

In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allowed this to be triggered with different parameters, with no additional execution privileges needed. User interaction is needed for...

CVE-2020-0360: Undefined Security Weakness

In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129456...

CVE-2020-0358: Time-of-check Time-of-use (TOCTOU) Race Condition

In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150227563...

CVE-2020-0346: Integer Overflow or Wraparound

In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled which it is by default, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0336: Out-of-bounds Write

In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444...

PT-2020-11716

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible resource exhaustion in libmedia due to improper input validation. This could lead to a remote denial of service, and no additional execution privileges are needed. User...

PT-2020-11705

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permissions bypass due to SQL injection in MediaProvider. This could lead to local information disclosure without requiring additional execution privileges. User interaction is...

PT-2020-11723

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in libAACdec due to a missing bounds check. This could lead to remote information disclosure without requiring additional execution privileges. User...

PT-2020-11711

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible use after free due to a race condition in SurfaceFlinger. This could lead to local escalation of privilege, requiring System execution privileges. User interaction is n...

PT-2020-11714

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure in libDRCdec due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed, requirin...

PT-2020-11694

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in DisplayManager due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2020-11725

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing permission check in ActivityManager, which could allow access to protected data. This might lead to local information disclosure without requiring additional execution...

PT-2020-11676

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in libavb, which could lead to a possible out of bounds read. This might result in local information disclosure without requiring additional execution...