PT-2020-11677

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read in libsonivox due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User...

PT-2020-11620

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2020-11686

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to improper input validation in the UrlQuerySanitizer. This could lead to remote code execution with no additional execution privileges needed. User interaction is not required for...

PT-2020-11681

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read due to an integer overflow in the camera. This could lead to local information disclosure, with System execution privileges required for exploitation...

PT-2020-11670

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue concerns a missing permission check in the UsageStatsManager, potentially allowing access to protected data. This could lead to local information disclosure without requiring additional executi...

PT-2020-11674

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds write in the mp3 extractor due to uninitialized data. This could potentially lead to remote code execution without requiring additional execution...

PT-2020-11665

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in Battery Saver due to an unsafe PendingIntent, which could lead to local information disclosure. This requires User execution privileges and does not need us...

CVE-2020-0375: Missing Authorization

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0374: Incorrect Default Permissions

In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156251602...

CVE-2020-0362: Improper Input Validation

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123237930...

CVE-2020-0353: Improper Input Validation

In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777526...

CVE-2020-0351: Improper Input Validation

In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777537...

CVE-2020-0320: Improper Input Validation

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129282427...

CVE-2020-0287: Improper Input Validation

In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141860394...

CVE-2020-0370: Out-of-bounds Read

In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-112051700...

CVE-2020-0364: Out-of-bounds Read

In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282770...

CVE-2020-0361: Use of Uninitialized Resource

In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151927433...

CVE-2020-0355: Out-of-bounds Read

In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141883493...

CVE-2020-0344: Improper Neutralization of Special Elements used in an SQL Command

In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140729887...

CVE-2020-0340: Use of Uninitialized Resource

In libcodec2softmp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144901522...