Google Android Mobile operating system

stack.watch can notify you when security vulnerabilities are reported in Google Android. You can add multiple products that you use with Android to create your own personal software stack watcher.

@Android Tweets

“Hey Google, order a smoothie on @Postmates” Google Assistant on Android saves you time and taps. Try it across y… https://t.co/f0v6g8F815
Wed Oct 21 18:19:18 +0000 2020

Ask Google to open or search most apps using just your voice. Curious? Say, “Hey Google, open my shortcuts,” to lea… https://t.co/w5CMcZRN1X
Tue Oct 20 20:48:57 +0000 2020

Exclusive to #Android, Google TV makes it easier than ever to search and find your favorite entertainment. Availabl… https://t.co/PzON0qiz04
Tue Oct 20 19:24:05 +0000 2020

By the Year

In 2020 there have been 487 vulnerabilities in Google Android with an average score of 7.1 out of ten. Last year Android had 491 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Android in 2020 could surpass last years number. Last year, the average CVE base score was greater by 0.05

Year	Vulnerabilities	Average Score
2020	487	7.06
2019	491	7.11
2018	294	7.58

It may take a day or so for new Android vulnerabilities to show up. Additionally vulnerabilities may be tagged under a different product or component name.

Latest Google Android Security Vulnerabilities

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free

CVE-2020-0427 5.5 - Medium - September 17, 2020

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171

CVE-2020-0427 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Dangling pointer

In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause

CVE-2020-0404 7.8 - High - September 17, 2020

In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel

CVE-2020-0404 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Improper Privilege Management

In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption

CVE-2020-0407 4.4 - Medium - September 17, 2020

In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs (Initialization Vectors), 64-bit IVs are used and later are truncated to 32 bits. This may cause IV reuse and thus weakened disk encryption. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153450752References: N/A

CVE-2020-0407 can be explotited with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Inadequate Encryption Strength

In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0389 5.5 - Medium - September 17, 2020

In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156959408

CVE-2020-0389 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

AuthZ

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0395 5.5 - Medium - September 17, 2020

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-154124307

CVE-2020-0395 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

AuthZ

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0396 5.5 - Medium - September 17, 2020

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155094269

CVE-2020-0396 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

AuthZ

In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0397 5.5 - Medium - September 17, 2020

In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155092443

CVE-2020-0397 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

AuthZ

In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0399 5.5 - Medium - September 17, 2020

In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153993591

CVE-2020-0399 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

AuthZ

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check

CVE-2020-0401 7.8 - High - September 17, 2020

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150857253

CVE-2020-0401 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

AuthZ

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception

CVE-2020-0382 2.3 - Low - September 17, 2020

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488

CVE-2020-0382 is exploitable with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.

Improper Check for Unusual or Exceptional Conditions

In the app zygote SE Policy, there is a possible permissions bypass

CVE-2020-0390 5.5 - Medium - September 17, 2020

In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157598026

CVE-2020-0390 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Incorrect Default Permissions

In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check

CVE-2020-0393 5.5 - Medium - September 17, 2020

In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-154123412

CVE-2020-0393 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

An issue was discovered on LG mobile devices with Android OS 10 software

CVE-2020-25282 9.8 - Critical - September 11, 2020

An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software (for the LG Universal Integrated Circuit Card) allows attackers to bypass intended access restrictions on property values. The LG ID is LVE-SMP-200020 (September 2020).

CVE-2020-25282 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

AuthZ

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software

CVE-2020-25283 9.8 - Critical - September 11, 2020

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers to bypass intended access restrictions on a certain mode. The LG ID is LVE-SMP-200021 (September 2020).

CVE-2020-25283 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

AuthZ

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-25278 9.8 - Critical - September 11, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung IDs are SVE-2020-18088, SVE-2020-18225, SVE-2020-18301 (September 2020).

CVE-2020-25278 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Out-of-bounds Write

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software

CVE-2020-25279 9.8 - Critical - September 11, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The baseband component has a buffer overflow via an abnormal SETUP message, leading to execution of arbitrary code. The Samsung ID is SVE-2020-18098 (September 2020).

CVE-2020-25279 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

buffer overrun

An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets) software

CVE-2020-25280 6.8 - Medium - September 11, 2020

An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets) software. Unauthenticated attackers can execute LTE/5G commands by sending a debugging command over USB. The Samsung ID is SVE-2020-16979 (September 2020).

CVE-2020-25280 is exploitable with physical access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.9 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software

CVE-2020-25281 7.5 - High - September 11, 2020

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings (such as the package verifier application) mishandle unknown-source installations. The LG ID is LVE-SMP-190002 (September 2020).

CVE-2020-25281 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

An issue was discovered on LG mobile devices with Android OS 10 software

CVE-2020-25057 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not properly restrict APK installations. The LG ID is LVE-SMP-200011 (July 2020).

CVE-2020-25057 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software

CVE-2020-25058 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management service does not properly restrict configuration changes. The LG ID is LVE-SMP-200012 (July 2020).

CVE-2020-25058 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software

CVE-2020-25059 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occur because of incorrect input validation. The LG ID is LVE-SMP-200013 (July 2020).

CVE-2020-25059 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Improper Input Validation

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software

CVE-2020-25060 7.8 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain privileges because of LAF and SBL1 flaws. The LG ID is LVE-SMP-200015 (July 2020).

CVE-2020-25060 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Improper Privilege Management

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network

CVE-2020-25061 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lge_property allows property overwrites. The LG ID is LVE-SMP-200016 (July 2020).

CVE-2020-25061 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

An issue was discovered on LG mobile devices with Android OS 9 and 10 software

CVE-2020-25062 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG ID is LVE-SMP-200017 (July 2020).

CVE-2020-25062 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Improper Privilege Management

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software

CVE-2020-25063 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. An application crash can occur because of incorrect application-level input validation. The LG ID is LVE-SMP-200018 (July 2020).

CVE-2020-25063 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Improper Input Validation

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software

CVE-2020-25064 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Certain automated testing is mishandled. The LG ID is LVE-SMP-200019 (August 2020).

CVE-2020-25064 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software

CVE-2020-25065 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may occur because of an obsolete API. The LG ID is LVE-SMP-170010 (August 2020).

CVE-2020-25065 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Exposure Through Discrepancy

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-25046 5.5 - Medium - August 31, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 (August 2020).

CVE-2020-25046 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Exposure Through Log Files

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (released in China and India) software

CVE-2020-25047 5.5 - Medium - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (released in China and India) software. The S Secure application does not enforce the intended password requirement for a locked application. The Samsung IDs are SVE-2020-16746, SVE-2020-16764 (August 2020).

CVE-2020-25047 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software

CVE-2020-25048 4.6 - Medium - August 31, 2020

An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticated downloads, aka file injection. The Samsung ID is SVE-2020-17760 (August 2020).

CVE-2020-25048 is exploitable with physical access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.9 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Downstream Injection

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software

CVE-2020-25049 9.8 - Critical - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. StatusBarService has insufficient DEX access control. The Samsung ID is SVE-2020-17797 (August 2020).

CVE-2020-25049 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

AuthZ

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software

CVE-2020-25050 7.5 - High - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC service allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 (August 2020).

CVE-2020-25050 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software

CVE-2020-25051 7.5 - High - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via AppInfo. The Samsung ID is SVE-2020-17758 (August 2020).

CVE-2020-25051 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-25055 9.8 - Critical - August 31, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The persona service allows attackers (who control an unprivileged SecureFolder process) to bypass admin restrictions in KnoxContainer. The Samsung ID is SVE-2020-18133 (August 2020).

CVE-2020-25055 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

AuthZ

In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file

CVE-2020-0261 7.8 - High - August 13, 2020

In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146059841

CVE-2020-0261 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Improper Privilege Management

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647626

CVE-2020-0251 7.5 - High - August 11, 2020

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647626

CVE-2020-0251 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236803

CVE-2020-0252 9.8 - Critical - August 11, 2020

There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236803

CVE-2020-0252 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Dangling pointer

There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647365

CVE-2020-0253 9.8 - Critical - August 11, 2020

There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647365

CVE-2020-0253 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Dangling pointer

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647751

CVE-2020-0254 7.5 - High - August 11, 2020

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647751

CVE-2020-0254 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

In android_verity_ctr of dm-android-verity.c

CVE-2020-0259 7.8 - High - August 11, 2020

In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157941353References: N/A

CVE-2020-0259 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Improper Privilege Management

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152225183

CVE-2020-0260 9.1 - Critical - August 11, 2020

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152225183

CVE-2020-0260 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity, and a high impact on availability.

Out-of-bounds Read

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception

CVE-2020-0108 7.8 - High - August 11, 2020

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-140108616

CVE-2020-0108 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Improper Privilege Management

In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race condition

CVE-2020-0238 7 - High - August 11, 2020

In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race condition. This could lead to local escalation of privilege and launching privileged activities with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150946634

CVE-2020-0238 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is consided to have a high level of attack complexity. It has an exploitability score of 1.0 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

TOCTTOU

In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata

CVE-2020-0239 5.5 - Medium - August 11, 2020

In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to a permissions bypass. This could lead to local information disclosure from a file (eg. a photo) containing location metadata with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-151095863

CVE-2020-0239 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Leak

In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow

CVE-2020-0240 8.8 - High - August 11, 2020

In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150706594

CVE-2020-0240 is exploitable with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Out-of-bounds Write

In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free

CVE-2020-0241 7.8 - High - August 11, 2020

In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-151456667

CVE-2020-0241 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Double-free

In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking

CVE-2020-0242 7.8 - High - August 11, 2020

In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-151643722

CVE-2020-0242 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Dangling pointer

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking

CVE-2020-0243 7.8 - High - August 11, 2020

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-151644303

CVE-2020-0243 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Dangling pointer

In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception

CVE-2020-0247 5.5 - Medium - August 11, 2020

In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1Android ID: A-156087409

CVE-2020-0247 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Loop with Unreachable Exit Condition ('Infinite Loop')

In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error

CVE-2020-0248 5.5 - Medium - August 11, 2020

In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-154627439

CVE-2020-0248 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Leak

In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error

CVE-2020-0249 5.5 - Medium - August 11, 2020

CVE-2020-0249 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Leak

In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check

CVE-2020-0250 5.5 - Medium - August 11, 2020

In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to local information disclosure of location data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-154934934

CVE-2020-0250 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Leak

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check

CVE-2020-0256 6.8 - Medium - August 11, 2020

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864

CVE-2020-0256 is exploitable with physical access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.9 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Out-of-bounds Write

In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup

CVE-2020-0257 7.8 - High - August 11, 2020

In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968

CVE-2020-0257 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Improper Privilege Management

In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup

CVE-2020-0258 5.5 - Medium - August 11, 2020

In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application that is started next with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-157598956

CVE-2020-0258 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Leak

There is an improper configuration of recorder related service

CVE-2020-0228 7.5 - High - July 17, 2020

There is an improper configuration of recorder related service. Product: AndroidVersions: Android SoCAndroid ID: A-156333723

CVE-2020-0228 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Leak

There is a possible out of bounds write due to an incorrect bounds check

CVE-2020-0230 9.8 - Critical - July 17, 2020

There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid ID: A-156337262

CVE-2020-0230 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Out-of-bounds Write

There is a possible out of bounds write due to an incorrect bounds check

CVE-2020-0231 9.8 - Critical - July 17, 2020

There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid ID: A-156333727

CVE-2020-0231 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Out-of-bounds Write

In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation

CVE-2020-0107 5.5 - Medium - July 17, 2020

In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146570216

CVE-2020-0107 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Incorrect Default Permissions

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check

CVE-2020-0227 7.8 - High - July 17, 2020

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-129476618

CVE-2020-0227 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Incorrect Default Permissions

In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml

CVE-2020-0122 6.7 - Medium - July 17, 2020

In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147247775

CVE-2020-0122 is exploitable with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Incorrect Default Permissions

In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion

CVE-2020-0224 9.8 - Critical - July 17, 2020

In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when processing a proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147664838

CVE-2020-0224 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Object Type Confusion

In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc

CVE-2020-0225 9.8 - Critical - July 17, 2020

In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142546668

CVE-2020-0225 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Out-of-bounds Write

In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion

CVE-2020-0226 7.8 - High - July 17, 2020

In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150226994

CVE-2020-0226 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Object Type Confusion

In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow

CVE-2020-0120 7.8 - High - July 17, 2020

In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-149995442

CVE-2020-0120 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Out-of-bounds Write

In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition

CVE-2020-0305 6.4 - Medium - July 17, 2020

In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744

CVE-2020-0305 can be explotited with local system access, and requires user privledges. This vulnerability is consided to have a high level of attack complexity. It has an exploitability score of 0.5 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Race Condition

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software

CVE-2020-15577 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Cameralyzer allows attackers to write files to the SD card. The Samsung ID is SVE-2020-16830 (July 2020).

CVE-2020-15577 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-15579 7.5 - High - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via the KNOX API. The Samsung ID is SVE-2020-17318 (July 2020).

CVE-2020-15579 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-15580 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) by enrolling a new lock password. The Samsung ID is SVE-2020-17328 (July 2020).

CVE-2020-15580 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-15581 5.3 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The kernel logging feature allows attackers to discover virtual addresses via vectors involving shared memory. The Samsung ID is SVE-2020-17605 (July 2020).

CVE-2020-15581 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.

Information Leak

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-15583 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 (July 2020).

CVE-2020-15583 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Directory traversal

An issue was discovered on Samsung mobile devices with Q(10.0) software

CVE-2020-15584 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can trigger an out-of-bounds access and device reset via a 4K wallpaper image because ImageProcessHelper mishandles boundary checks. The Samsung ID is SVE-2020-18056 (July 2020).

CVE-2020-15584 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Memory Corruption

An issue was discovered on Samsung mobile devices with O(8.x) software

CVE-2020-15578 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x) software. FactoryCamera does not properly restrict runtime permissions. The Samsung ID is SVE-2020-17270 (July 2020).

CVE-2020-15578 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

Incorrect Default Permissions

This is an unbounded write into kernel global memory

CVE-2020-0223 9.8 - Critical - June 16, 2020

This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450

CVE-2020-0223 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Improper Privilege Management

Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it

CVE-2020-0232 9.8 - Critical - June 16, 2020

Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it. A concurrent thread could retrieve created transfer object from the session object and delete it using abc_pcie_dma_user_xfer_clean. If this happens, abc_pcie_start_dma_xfer and abc_pcie_wait_dma_xfer in the original thread will trigger UAF when working with the transfer object.Product: AndroidVersions: Android kernelAndroid ID: A-151453714

CVE-2020-0232 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Dangling pointer

In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check

CVE-2020-0234 7.8 - High - June 16, 2020

In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-148189280

CVE-2020-0234 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Out-of-bounds Write

In crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use

CVE-2020-0235 9.8 - Critical - June 16, 2020

In crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the size parameter for "copy_from_user", ending up overwriting memory following "crus_sp_hdr". "crus_sp_hdr" is a static variable, of type "struct crus_sp_ioctl_header".Product: AndroidVersions: Android kernelAndroid ID: A-135129430

CVE-2020-0235 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Memory Corruption

In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check

CVE-2020-0155 7.8 - High - June 11, 2020

In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736386

CVE-2020-0155 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Out-of-bounds Write

In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check

CVE-2020-0158 4.4 - Medium - June 11, 2020

In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141547128

CVE-2020-0158 is exploitable with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check

CVE-2020-0159 5.5 - Medium - June 11, 2020

In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140768035

CVE-2020-0159 can be explotited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check

CVE-2020-0160 8.8 - High - June 11, 2020

In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124771364

CVE-2020-0160 is exploitable with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Memory Corruption

In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation

CVE-2020-0162 6.5 - Medium - June 11, 2020

In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124526959

CVE-2020-0162 is exploitable with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Improper Input Validation

In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation

CVE-2020-0163 6.5 - Medium - June 11, 2020

In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124525515

CVE-2020-0163 can be explotited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Improper Input Validation

In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check

CVE-2020-0164 4.4 - Medium - June 11, 2020

In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736125

CVE-2020-0164 is exploitable with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow

CVE-2020-0167 5.5 - Medium - June 11, 2020

In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-129475100

CVE-2020-0167 can be explotited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization

CVE-2020-0132 5.5 - Medium - June 11, 2020

In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139473816

CVE-2020-0132 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Marshaling, Unmarshaling

In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data

CVE-2020-0134 5.5 - Medium - June 11, 2020

In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146052771

CVE-2020-0134 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Leak

In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check

CVE-2020-0151 4.4 - Medium - June 11, 2020

In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-133164384

CVE-2020-0151 can be explotited with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check

CVE-2020-0152 4.4 - Medium - June 11, 2020

In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145992159

CVE-2020-0152 is exploitable with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check

CVE-2020-0153 6.7 - Medium - June 11, 2020

In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139733543

CVE-2020-0153 can be explotited with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Out-of-bounds Write

In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation

CVE-2020-0161 6.5 - Medium - June 11, 2020

In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127973550

CVE-2020-0161 can be explotited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Improper Input Validation

In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check

CVE-2020-0165 6.7 - Medium - June 11, 2020

In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139532977

CVE-2020-0165 can be explotited with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Out-of-bounds Write

In multiple functions of URI.java

CVE-2020-0166 7.8 - High - June 11, 2020

In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI information. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124526860

CVE-2020-0166 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Improper Privilege Management

In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check

CVE-2020-0185 5.5 - Medium - June 11, 2020

In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-79945152

CVE-2020-0185 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison

CVE-2020-0187 5.5 - Medium - June 11, 2020

In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148517383

CVE-2020-0187 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check

CVE-2020-0197 5.5 - Medium - June 11, 2020

In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137370379

CVE-2020-0197 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Out-of-bounds Read

In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds check

CVE-2020-0217 9.8 - Critical - June 11, 2020

In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141331405

CVE-2020-0217 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulneraility has a high impact to the confidentiality, integrity and availability of this component.

Out-of-bounds Write

In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check

CVE-2020-0129 7.8 - High - June 11, 2020

In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123292010

CVE-2020-0129 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Out-of-bounds Write

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check

CVE-2020-0135 4.4 - Medium - June 11, 2020

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150949837

CVE-2020-0135 can be explotited with local system access, and requires user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Incorrect Default Permissions

In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow

CVE-2020-0136 7.8 - High - June 11, 2020

In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-120078455

CVE-2020-0136 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Integer Overflow or Wraparound

Google Android Mobile operating system

@Android Tweets

By the Year

Latest Google Android Security Vulnerabilities

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free CVE-2020-0427 5.5 - Medium - September 17, 2020

In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause CVE-2020-0404 7.8 - High - September 17, 2020

In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption CVE-2020-0407 4.4 - Medium - September 17, 2020

In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent CVE-2020-0389 5.5 - Medium - September 17, 2020

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent CVE-2020-0395 5.5 - Medium - September 17, 2020

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent CVE-2020-0396 5.5 - Medium - September 17, 2020

In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent CVE-2020-0397 5.5 - Medium - September 17, 2020

In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent CVE-2020-0399 5.5 - Medium - September 17, 2020

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check CVE-2020-0401 7.8 - High - September 17, 2020

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception CVE-2020-0382 2.3 - Low - September 17, 2020

In the app zygote SE Policy, there is a possible permissions bypass CVE-2020-0390 5.5 - Medium - September 17, 2020

In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check CVE-2020-0393 5.5 - Medium - September 17, 2020

An issue was discovered on LG mobile devices with Android OS 10 software CVE-2020-25282 9.8 - Critical - September 11, 2020

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software CVE-2020-25283 9.8 - Critical - September 11, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software CVE-2020-25278 9.8 - Critical - September 11, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software CVE-2020-25279 9.8 - Critical - September 11, 2020

An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets) software CVE-2020-25280 6.8 - Medium - September 11, 2020

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software CVE-2020-25281 7.5 - High - September 11, 2020

An issue was discovered on LG mobile devices with Android OS 10 software CVE-2020-25057 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software CVE-2020-25058 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software CVE-2020-25059 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software CVE-2020-25060 7.8 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network CVE-2020-25061 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 9 and 10 software CVE-2020-25062 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software CVE-2020-25063 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software CVE-2020-25064 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software CVE-2020-25065 7.5 - High - August 31, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software CVE-2020-25046 5.5 - Medium - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (released in China and India) software CVE-2020-25047 5.5 - Medium - August 31, 2020

An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software CVE-2020-25048 4.6 - Medium - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software CVE-2020-25049 9.8 - Critical - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software CVE-2020-25050 7.5 - High - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software CVE-2020-25051 7.5 - High - August 31, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software CVE-2020-25055 9.8 - Critical - August 31, 2020

In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file CVE-2020-0261 7.8 - High - August 13, 2020

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647626 CVE-2020-0251 7.5 - High - August 11, 2020

There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236803 CVE-2020-0252 9.8 - Critical - August 11, 2020

There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647365 CVE-2020-0253 9.8 - Critical - August 11, 2020

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647751 CVE-2020-0254 7.5 - High - August 11, 2020

In android_verity_ctr of dm-android-verity.c CVE-2020-0259 7.8 - High - August 11, 2020

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152225183 CVE-2020-0260 9.1 - Critical - August 11, 2020

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception CVE-2020-0108 7.8 - High - August 11, 2020

In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race condition CVE-2020-0238 7 - High - August 11, 2020

In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata CVE-2020-0239 5.5 - Medium - August 11, 2020

In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow CVE-2020-0240 8.8 - High - August 11, 2020

In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free CVE-2020-0241 7.8 - High - August 11, 2020

In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking CVE-2020-0242 7.8 - High - August 11, 2020

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking CVE-2020-0243 7.8 - High - August 11, 2020

In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception CVE-2020-0247 5.5 - Medium - August 11, 2020

In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error CVE-2020-0248 5.5 - Medium - August 11, 2020

In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error CVE-2020-0249 5.5 - Medium - August 11, 2020

In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check CVE-2020-0250 5.5 - Medium - August 11, 2020

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check CVE-2020-0256 6.8 - Medium - August 11, 2020

In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup CVE-2020-0257 7.8 - High - August 11, 2020

In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup CVE-2020-0258 5.5 - Medium - August 11, 2020

There is an improper configuration of recorder related service CVE-2020-0228 7.5 - High - July 17, 2020

There is a possible out of bounds write due to an incorrect bounds check CVE-2020-0230 9.8 - Critical - July 17, 2020

There is a possible out of bounds write due to an incorrect bounds check CVE-2020-0231 9.8 - Critical - July 17, 2020

In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation CVE-2020-0107 5.5 - Medium - July 17, 2020

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check CVE-2020-0227 7.8 - High - July 17, 2020

In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml CVE-2020-0122 6.7 - Medium - July 17, 2020

In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion CVE-2020-0224 9.8 - Critical - July 17, 2020

In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc CVE-2020-0225 9.8 - Critical - July 17, 2020

In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion CVE-2020-0226 7.8 - High - July 17, 2020

In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow CVE-2020-0120 7.8 - High - July 17, 2020

In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition CVE-2020-0305 6.4 - Medium - July 17, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software CVE-2020-15577 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software CVE-2020-15579 7.5 - High - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software CVE-2020-15580 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software CVE-2020-15581 5.3 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software CVE-2020-15583 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with Q(10.0) software CVE-2020-15584 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x) software CVE-2020-15578 5.5 - Medium - July 07, 2020

This is an unbounded write into kernel global memory CVE-2020-0223 9.8 - Critical - June 16, 2020

Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it CVE-2020-0232 9.8 - Critical - June 16, 2020

In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check CVE-2020-0234 7.8 - High - June 16, 2020

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free

CVE-2020-0427 5.5 - Medium - September 17, 2020

In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause

CVE-2020-0404 7.8 - High - September 17, 2020

In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption

CVE-2020-0407 4.4 - Medium - September 17, 2020

In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0389 5.5 - Medium - September 17, 2020

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0395 5.5 - Medium - September 17, 2020

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0396 5.5 - Medium - September 17, 2020

In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0397 5.5 - Medium - September 17, 2020

In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent

CVE-2020-0399 5.5 - Medium - September 17, 2020

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check

CVE-2020-0401 7.8 - High - September 17, 2020

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception

CVE-2020-0382 2.3 - Low - September 17, 2020

In the app zygote SE Policy, there is a possible permissions bypass

CVE-2020-0390 5.5 - Medium - September 17, 2020

In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check

CVE-2020-0393 5.5 - Medium - September 17, 2020

An issue was discovered on LG mobile devices with Android OS 10 software

CVE-2020-25282 9.8 - Critical - September 11, 2020

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software

CVE-2020-25283 9.8 - Critical - September 11, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-25278 9.8 - Critical - September 11, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software

CVE-2020-25279 9.8 - Critical - September 11, 2020

An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets) software

CVE-2020-25280 6.8 - Medium - September 11, 2020

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software

CVE-2020-25281 7.5 - High - September 11, 2020

An issue was discovered on LG mobile devices with Android OS 10 software

CVE-2020-25057 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software

CVE-2020-25058 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software

CVE-2020-25059 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software

CVE-2020-25060 7.8 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network

CVE-2020-25061 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 9 and 10 software

CVE-2020-25062 9.8 - Critical - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software

CVE-2020-25063 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software

CVE-2020-25064 7.5 - High - August 31, 2020

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software

CVE-2020-25065 7.5 - High - August 31, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-25046 5.5 - Medium - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (released in China and India) software

CVE-2020-25047 5.5 - Medium - August 31, 2020

An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software

CVE-2020-25048 4.6 - Medium - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software

CVE-2020-25049 9.8 - Critical - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software

CVE-2020-25050 7.5 - High - August 31, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software

CVE-2020-25051 7.5 - High - August 31, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-25055 9.8 - Critical - August 31, 2020

In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file

CVE-2020-0261 7.8 - High - August 13, 2020

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647626

CVE-2020-0251 7.5 - High - August 11, 2020

There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236803

CVE-2020-0252 9.8 - Critical - August 11, 2020

There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647365

CVE-2020-0253 9.8 - Critical - August 11, 2020

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647751

CVE-2020-0254 7.5 - High - August 11, 2020

In android_verity_ctr of dm-android-verity.c

CVE-2020-0259 7.8 - High - August 11, 2020

There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152225183

CVE-2020-0260 9.1 - Critical - August 11, 2020

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception

CVE-2020-0108 7.8 - High - August 11, 2020

In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race condition

CVE-2020-0238 7 - High - August 11, 2020

In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata

CVE-2020-0239 5.5 - Medium - August 11, 2020

In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow

CVE-2020-0240 8.8 - High - August 11, 2020

In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free

CVE-2020-0241 7.8 - High - August 11, 2020

In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking

CVE-2020-0242 7.8 - High - August 11, 2020

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking

CVE-2020-0243 7.8 - High - August 11, 2020

In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception

CVE-2020-0247 5.5 - Medium - August 11, 2020

In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error

CVE-2020-0248 5.5 - Medium - August 11, 2020

In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error

CVE-2020-0249 5.5 - Medium - August 11, 2020

In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check

CVE-2020-0250 5.5 - Medium - August 11, 2020

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check

CVE-2020-0256 6.8 - Medium - August 11, 2020

In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup

CVE-2020-0257 7.8 - High - August 11, 2020

In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup

CVE-2020-0258 5.5 - Medium - August 11, 2020

There is an improper configuration of recorder related service

CVE-2020-0228 7.5 - High - July 17, 2020

There is a possible out of bounds write due to an incorrect bounds check

CVE-2020-0230 9.8 - Critical - July 17, 2020

There is a possible out of bounds write due to an incorrect bounds check

CVE-2020-0231 9.8 - Critical - July 17, 2020

In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation

CVE-2020-0107 5.5 - Medium - July 17, 2020

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check

CVE-2020-0227 7.8 - High - July 17, 2020

In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml

CVE-2020-0122 6.7 - Medium - July 17, 2020

In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion

CVE-2020-0224 9.8 - Critical - July 17, 2020

In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc

CVE-2020-0225 9.8 - Critical - July 17, 2020

In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion

CVE-2020-0226 7.8 - High - July 17, 2020

In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow

CVE-2020-0120 7.8 - High - July 17, 2020

In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition

CVE-2020-0305 6.4 - Medium - July 17, 2020

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software

CVE-2020-15577 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-15579 7.5 - High - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-15580 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-15581 5.3 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software

CVE-2020-15583 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with Q(10.0) software

CVE-2020-15584 5.5 - Medium - July 07, 2020

An issue was discovered on Samsung mobile devices with O(8.x) software

CVE-2020-15578 5.5 - Medium - July 07, 2020

This is an unbounded write into kernel global memory

CVE-2020-0223 9.8 - Critical - June 16, 2020

Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it

CVE-2020-0232 9.8 - Critical - June 16, 2020

In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check

CVE-2020-0234 7.8 - High - June 16, 2020

In crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use

CVE-2020-0235 9.8 - Critical - June 16, 2020

In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check

CVE-2020-0155 7.8 - High - June 11, 2020

In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check

CVE-2020-0158 4.4 - Medium - June 11, 2020

In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check

CVE-2020-0159 5.5 - Medium - June 11, 2020