Browse CVEs

MEDIUM 5.5 CVE-2020-0329 In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local information disclosure with no a… Android Mitigation only Fix from $1,6002020-09-17 HIGH 8.8 CVE-2020-0303 In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execution in the media extractor w… Android Mitigation only Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0275 In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypa… Android Mitigation only Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0277 In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502020-09-17 MEDIUM 6.5 CVE-2020-0270 In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 6.5 CVE-2020-0279 In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no add… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 6.5 CVE-2020-0287 In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additi… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 6.5 CVE-2020-0301 In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no addi… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0274 In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local information disclosure with no … Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0288 In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boundaries with no additional exe… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0289 In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution pri… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0290 In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution pri… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0293 In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could lead to local information dis… Android No fix yet Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0296 In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure w… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0297 In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with U… Android Mitigation only Fix from $1,6002020-09-17 HIGH 8.8 CVE-2020-0264 In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional ex… Android Mitigation only Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0130 In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system pr… Android Mitigation only Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0266 In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0267 In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilege due to l… Android Mitigation only Fix from $1,9502020-09-17 MEDIUM 5.5 CVE-2020-0125 In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional… Android Mitigation only Fix from $1,6002020-09-17 HIGH 7.8 CVE-2020-0430 In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0432 In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… Android Patch available Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0433 In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of pri… Android Patch available Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0434 In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,9502020-09-17 MEDIUM 6.7 CVE-2020-0429 In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local es… Android Patch available Fix from $1,6002020-09-17 MEDIUM 6.7 CVE-2020-0431 In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… Android Patch available Fix from $1,6002020-09-17 HIGH 7.8 CVE-2020-0387 In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to local escala… Android Mitigation only Fix from $1,9502020-09-17 MEDIUM 6.7 CVE-2020-0403 In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 6.4 CVE-2020-0428 In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution priv… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0404 In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalati… Android Mitigation only Fix from $1,6002020-09-17