PT-2020-11500

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to an integer overflow in the NDEF MsgValidate function of ndef utils.c. This could lead to local information disclosure if a malformed NFC tag i...

PT-2020-11512

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible out of bounds read due to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c could lead to a local information disclosure. This issue requires System executio...

PT-2020-11557

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible use-after-free due to a race condition exists in TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp. This could lead to local information disclosure with System execution privileges neede...

PT-2020-11515

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-10 Description The issue is related to an incorrect bounds check in the nci proc core rsp function of nci hrcv.cc, which could lead to a possible out of bounds read. This might result in local information...

PT-2020-11525

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the phNxpNciHal NfcDep cmd ext function of phNxpNciHal NfcDepSWPrio.cc. This could lead to local information disclosure, requiring System executio...

CVE-2020-0135: Missing Authorization

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2020-11520

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the rw mfc writeBlock function of rw mfc.cc due to an incorrect bounds check. This could lead to local information disclosure, requiring System...

PT-2020-11513

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the avb vbmeta image verify function of avb vbmeta image.c, which could lead to a possible out of bounds read. This might result in local information...

PT-2020-11505

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the btm proc sp req evt function of btm sec.cc due to a missing bounds check. This could lead to local information disclosure via compromised devi...

CVE-2020-0152: Out-of-bounds Read

In avbvbmetaimageverify of avbvbmetaimage.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

CVE-2020-0124: Out-of-bounds Write

In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0141: Concurrent Execution using Shared Resource with Improper Synchronization

In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. This could lead to remote information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0145: Out-of-bounds Read

In btmsimplepaircomplete of btmsec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0164: Out-of-bounds Read

In phNxpNciHalNfcDepcmdext of phNxpNciHalNfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0158: Out-of-bounds Read

In nfcncifproct3tpollingntf of nfcncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0154: Out-of-bounds Read

In nciproccorersp of ncihrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0153: Out-of-bounds Write

In phNxpNciHalwriteext of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android...

Information disclosure

In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1...

Out-of-bounds

In crusafecallback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2020-0220

In crusafecallback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...