Browse CVEs

MEDIUM 6.5 CVE-2020-0494 In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disc… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0493 In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to loca… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0495 In decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local information disc… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0496 In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp, there is a possible memory corruption due to a use-after free. This could lead to local inf… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0497 In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional e… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0498 In decode_packed_entry_number of codebook.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informat… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0500 In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to loc… Android Mitigation only Fix from $1,6002020-12-15 HIGH 7.8 CVE-2020-0475 In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. T… Android Mitigation only Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-0478 In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-0479 In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a malic… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-0480 In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escala… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-0485 In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This cou… Android Patch available Fix from $1,9502020-12-15 HIGH 7.8 CVE-2020-0486 In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local … Android Patch available Fix from $1,9502020-12-15 HIGH 7.0 CVE-2020-0474 In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of pr… Android Patch available Fix from $1,9502020-12-15 MEDIUM 6.7 CVE-2020-0483 In DrmManagerService::~DrmManagerService() of DrmManagerService.cpp, there is a possible memory corruption due to a use after free. This could lead t… Android Patch available Fix from $1,6002020-12-15 MEDIUM 6.7 CVE-2020-0484 In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privileg… Android Patch available Fix from $1,6002020-12-15 MEDIUM 6.5 CVE-2020-0488 In ihevc_inter_pred_chroma_copy_ssse3 of ihevc_inter_pred_filters_ssse3_intr.c, there is a possible information disclosure due to uninitialized data.… Android Patch available Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0477 In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check. This c… Android Patch available Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0244 In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor… Android Patch available Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0280 In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informat… Android Patch available Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-8936 An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall fail… Asylo after 0.6.0 Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-8939 An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from… Asylo after 0.6.0 Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-8940 An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an at… Asylo after 0.6.0 Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-8941 An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an … Asylo after 0.6.0 Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-8942 An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return s… Asylo after 0.6.0 Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-8943 An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose retu… Asylo after 0.6.0 Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-8944 An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribut… Asylo after 0.6.0 Fix from $1,6002020-12-15 HIGH 7.8 CVE-2020-8935 An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untr… Asylo after 0.6.0 Fix from $1,9502020-12-15 CRITICAL 9.8 CVE-2020-0456 There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843 Android No fix yet Fix from $2,3002020-12-14 HIGH 7.8 CVE-2020-0016 In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additio… Android Mitigation only Fix from $1,9502020-12-14