Browse CVEs

CRITICAL 9.8 CVE-2020-27068 Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel Android Patch available Fix from $2,3002020-12-15 MEDIUM 6.7 CVE-2020-27066 In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This could lead to local escalation … Android Patch available Fix from $1,6002020-12-15 MEDIUM 6.4 CVE-2020-27067 In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execu… Android Patch available Fix from $1,6002020-12-15 HIGH 7.8 CVE-2020-27044 In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with n… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-27045 In CE_SendRawFrame of ce_main.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privi… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-27048 In RW_SendRawFrame of rw_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-27049 In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of … Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-27050 In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local e… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-27051 In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escala… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-27052 In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a permissions bypass. This cou… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-27054 In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no addi… Android Patch available Fix from $1,9502020-12-15 HIGH 7.5 CVE-2020-27055 In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi … Android Patch available Fix from $1,9502020-12-15 MEDIUM 6.5 CVE-2020-27038 In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak. This could lead to remote denial of service with no … Android Patch available Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-27039 In postNotification of ServiceRecord.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information… Android Patch available Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-27041 In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This could lead to local information disclosure of not… Android Patch available Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-27047 In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… Android Patch available Fix from $1,6002020-12-15 MEDIUM 6.7 CVE-2020-27036 In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… Android Patch available Fix from $1,6002020-12-15 HIGH 7.8 CVE-2020-27030 In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,9502020-12-15 HIGH 7.5 CVE-2020-27024 In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote info… Android Mitigation only Fix from $1,9502020-12-15 MEDIUM 6.5 CVE-2020-27029 In TextView of TextView.java, there is a possible app hang due to improper input validation. This could lead to remote denial of service with no addi… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-27025 In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to loc… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-27026 During boot, the device unlock interface behaves differently depending on if a fingerprint registered to the device is present. This could lead to lo… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-27027 In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-27032 In getRadioAccessFamily of PhoneInterfaceManager.java, there is a possible read of privileged data due to a missing permission check. This could lead… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-27034 In createSimSelectNotification of SimSelectNotification.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead t… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-27035 In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper locking. This could lead to local information disc… Android Mitigation only Fix from $1,6002020-12-15 HIGH 8.8 CVE-2020-0489 In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the m… Android Patch available Fix from $1,9502020-12-15 MEDIUM 6.5 CVE-2020-0490 In floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclo… Android Patch available Fix from $1,6002020-12-15 MEDIUM 6.5 CVE-2020-0491 In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service … Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 6.5 CVE-2020-0492 In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information d… Android Mitigation only Fix from $1,6002020-12-15