Browse CVEs

MEDIUM 5.5 CVE-2020-0167 In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with… Android Patch available Fix from $1,6002020-06-11 HIGH 7.8 CVE-2020-0150 In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala… Android Patch available Fix from $1,9502020-06-11 HIGH 7.8 CVE-2020-0155 In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to loca… Android Patch available Fix from $1,9502020-06-11 HIGH 7.5 CVE-2020-0140 In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information… Android Patch available Fix from $1,9502020-06-11 HIGH 7.5 CVE-2020-0142 In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disc… Android Patch available Fix from $1,9502020-06-11 MEDIUM 6.7 CVE-2020-0153 In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal… Android Patch available Fix from $1,6002020-06-11 CRITICAL 9.8 CVE-2020-0138 In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executio… Android Patch available Fix from $2,3002020-06-11 HIGH 8.8 CVE-2020-0131 In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code exe… Android Patch available Fix from $1,9502020-06-11 HIGH 7.8 CVE-2020-0129 In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of p… Android Patch available Fix from $1,9502020-06-11 HIGH 7.8 CVE-2020-0136 In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privi… Android Patch available Fix from $1,9502020-06-11 HIGH 7.8 CVE-2020-0137 In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission check. This … Android Patch available Fix from $1,9502020-06-11 HIGH 7.5 CVE-2020-0128 In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosur… Android Patch available Fix from $1,9502020-06-11 HIGH 7.3 CVE-2020-0133 In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. This could lead to lo… Android Patch available Fix from $1,9502020-06-11 MEDIUM 6.7 CVE-2020-0124 In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc… Android Patch available Fix from $1,6002020-06-11 MEDIUM 6.5 CVE-2020-0127 In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… Android Patch available Fix from $1,6002020-06-11 MEDIUM 6.4 CVE-2020-0126 In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with Syst… Android Patch available Fix from $1,6002020-06-11 MEDIUM 5.5 CVE-2020-0132 In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local … Android Patch available Fix from $1,6002020-06-11 MEDIUM 5.5 CVE-2020-0134 In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosu… Android Patch available Fix from $1,6002020-06-11 CRITICAL 9.8 CVE-2020-0117 In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluet… Android Patch available Fix from $2,3002020-06-10 HIGH 7.8 CVE-2020-0114 In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local es… Android Patch available Fix from $1,9502020-06-10 HIGH 7.8 CVE-2020-0115 In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for a… Android Patch available Fix from $1,9502020-06-10 HIGH 7.8 CVE-2020-0118 In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escala… Android Patch available Fix from $1,9502020-06-10 MEDIUM 5.5 CVE-2020-0113 In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information … Android Patch available Fix from $1,6002020-06-10 MEDIUM 5.5 CVE-2020-0116 In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This cou… Android Patch available Fix from $1,6002020-06-10 MEDIUM 5.5 CVE-2020-0121 In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclos… Android Patch available Fix from $1,6002020-06-10 MEDIUM 5.3 CVE-2020-0119 In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certifica… Android Patch available Fix from $1,6002020-06-10 HIGH 7.8 CVE-2020-13842 An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT command was made available even … Android Mitigation only Fix from $1,9502020-06-05 MEDIUM 5.5 CVE-2020-13843 An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking o… Android 2020-06-01+ Fix from $1,6002020-06-05 CRITICAL 9.8 CVE-2020-13839 An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via a custom AT comman… Android Mitigation only Fix from $2,3002020-06-05 CRITICAL 9.8 CVE-2020-13840 An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via an MTK AT command … Android Mitigation only Fix from $2,3002020-06-05