CVE-2020-27049

In rwt3tsendrawframe of rwt3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27049

In rwt3tsendrawframe of rwt3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27049

Summary (CVE-2020-27049) : The issue lies in Android’s rw_t3t_send_raw_frame (rw_t3t.cc). A missing bounds check causes an out-of-bounds write in the T3T (Type 3 Tag) handling path, enabling local escalation of privilege with no additional execution privileges, and requiring user interaction to e...