CVE-2020-0149

CVE-2020-0149 describes a local info-disclosure flaw in Android 10 caused by an out-of-bounds read in btu_hcif_mode_change_evt (btu_hcif.cc). The issue allows local attackers with System privileges to access information without user interaction. Affected: Android 10 devices; vector is local. The ...

CVE-2020-0147

CVE-2020-0147 affects Android 10 (Pixel devices) due to an out-of-bounds read in btu_hcif_esco_connection_chg_evt of btu_hcif.cc caused by a missing bounds check. This enables local information disclosure with system-execution privileges needed; no user interaction required. Connected sources con...

CVE-2020-0056

CVE-2020-0056 is an Android 10 vulnerability affecting the btu_hcif_connection_comp_evt function in btu_hcif.cc, where a missing bounds check can trigger an out-of-bounds read. This may lead to local information disclosure without requiring privileges or user interaction. The issue is documented ...