Browse CVEs

MEDIUM 5.5 CVE-2019-2088 In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were not enabled, with no additiona… Android Mitigation only Fix from $1,6002020-03-15 HIGH 7.8 CVE-2020-0084 In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by cre… Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.8 CVE-2020-0085 In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escala… Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.5 CVE-2020-0062 In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote information disclosure with no ad… Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.3 CVE-2020-0063 In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no a… Android Mitigation only Fix from $1,9502020-03-10 MEDIUM 6.4 CVE-2020-0066 In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 5.5 CVE-2020-0087 In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local information disclo… Android Mitigation only Fix from $1,6002020-03-10 HIGH 7.8 CVE-2020-0051 In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of privilege in Settings with no … Android Patch available Fix from $1,9502020-03-10 HIGH 7.8 CVE-2020-0054 In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to a missing permission check. … Android Patch available Fix from $1,9502020-03-10 MEDIUM 6.7 CVE-2020-0050 In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalati… Android Patch available Fix from $1,6002020-03-10 MEDIUM 6.7 CVE-2020-0053 In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_util.cpp, there is a possible … Android Patch available Fix from $1,6002020-03-10 MEDIUM 6.5 CVE-2020-0049 In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This could lead to remote information… Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 5.5 CVE-2020-0048 In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lead to local information disclo… Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 5.5 CVE-2020-0055 In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local… Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 5.5 CVE-2020-0056 In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local inform… Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 5.5 CVE-2020-0057 In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information … Android Mitigation only Fix from $1,6002020-03-10 HIGH 7.8 CVE-2020-0046 In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local es… Android Mitigation only Fix from $1,9502020-03-10 MEDIUM 6.4 CVE-2020-0045 In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of pri… Android Mitigation only Fix from $1,6002020-03-10 HIGH 7.5 CVE-2020-0083 In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could lead to remo… Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.8 CVE-2020-0036 In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to loc… Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.8 CVE-2020-0041 KEV In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.8 CVE-2020-0069 KEV In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missin… Android 9.1.0.340 / 10.0.0.177+ Fix from $1,9502020-03-10 HIGH 7.5 CVE-2020-0037 In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information … Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.5 CVE-2020-0038 In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote inform… Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.5 CVE-2020-0039 In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote inform… Android Mitigation only Fix from $1,9502020-03-10 MEDIUM 5.5 CVE-2020-0035 In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local informati… Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 5.5 CVE-2020-0059 In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This c… Android Mitigation only Fix from $1,6002020-03-10 MEDIUM 5.5 CVE-2020-0061 In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure wi… Android Mitigation only Fix from $1,6002020-03-10 HIGH 8.8 CVE-2020-0032 In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote co… Android Mitigation only Fix from $1,9502020-03-10 HIGH 7.8 CVE-2020-0033 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502020-03-10