CVE-2020-0438

In the AIBinderClass constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinderndk in a vulnerable way with no additional execution privileges needed. User interaction is no...

PT-2020-11781

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description The issue is related to a possible arbitrary code execution due to uninitialized data in the AIBinder Class constructor of ibinder.cpp. This could lead to local escalation of privilege...