CVE-2020-0488

In ihevcinterpredchromacopyssse3 of ihevcinterpredfiltersssse3intr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0488

CVE-2020-0488 affects Android 11 on Pixel devices, with a vulnerability in the media processing path: in ihevc_inter_pred_chroma_copy_ssse3 (file ihevc_inter_pred_filters_ssse3_intr.c), uninitialized data can cause information disclosure. Impact is partial confidentiality loss, remote information...

PT-2020-11823

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible information disclosure due to uninitialized data in the ihevc inter pred chroma copy ssse3 function of ihevc inter pred filters ssse3 intr.c. This could lead to remote...

CVE-2020-0488: Exposure of Sensitive Information to an Unauthorized Actor

In ihevcinterpredchromacopyssse3 of ihevcinterpredfiltersssse3intr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

PT-2020-7003

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the use of uninitialized data in the memzero explicit function of compiler-clang.h, which could lead to a bypass of defense in depth. This might result in local information disclosure without...

CVE-2020-0450

In rwi93smformat of rwi93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1...

CVE-2020-0438

In the AIBinderClass constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinderndk in a vulnerable way with no additional execution privileges needed. User interaction is no...

CVE-2020-0438

In the AIBinderClass constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinderndk in a vulnerable way with no additional execution privileges needed. User interaction is no...

CVE-2020-0450

In rwi93smformat of rwi93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1...

CVE-2020-0438

In the AIBinderClass constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinderndk in a vulnerable way with no additional execution privileges needed. User interaction is no...

CVE-2020-0438

In the AIBinderClass constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinderndk in a vulnerable way with no additional execution privileges needed. User interaction is no...

CVE-2020-0450

In rwi93smformat of rwi93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. It is possible due to uninitialized kernel data leak in userspace coredumps...

UBUNTU-CVE-2020-15989

Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

ASB-A-157650336

In rwi93smformat of rwi93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2020-11781

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description The issue is related to a possible arbitrary code execution due to uninitialized data in the AIBinder Class constructor of ibinder.cpp. This could lead to local escalation of privilege...

CVE-2020-0411

In AACExtractor of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Andro...

Out-of-bounds

In AACExtractor of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Andro...

CVE-2020-0411

CVE-2020-0411 affects Android media framework (Media Framework) with an out-of-bounds write in AACExtractor.cpp due to uninitialized data, potentially enabling remote information disclosure. The Android 10/11 patch details in the 2020-10 bulletin list CVE-2020-0411 as an Information Disclosure is...

CVE-2020-0411

In AACExtractor of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Andro...