Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2020-0220
In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-139739561
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-05-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0221
Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID: A-135772851
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-05-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0223
This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0224
In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when processing a proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147664838
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2020-07-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0225
In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142546668
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2020-07-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0226
In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150226994
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2020-07-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0227
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-129476618
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2020-07-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0232
Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it. A concurrent thread could retrieve created transfer object from the session object and delete it using abc_pcie_dma_user_xfer_clean. If this happens, abc_pcie_start_dma_xfer and abc_pcie_wait_dma_xfer in the original thread will trigger UAF when working with the transfer object.Product: AndroidVersions: Android kernelAndroid ID: A-151453714
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0233
In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150225255
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0234
In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-148189280
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0235
In crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the size parameter for "copy_from_user", ending up overwriting memory following "crus_sp_hdr". "crus_sp_hdr" is a static variable, of type "struct crus_sp_ioctl_header".Product: AndroidVersions: Android kernelAndroid ID: A-135129430
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0236
In A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android, Versions: Android-10, Android ID: A-79703353.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/android-10'}]
CVE State: PUBLISHED
Explain CVE-2020-0238
In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race condition. This could lead to local escalation of privilege and launching privileged activities with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150946634
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0239
In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to a permissions bypass. This could lead to local information disclosure from a file (eg. a photo) containing location metadata with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-151095863
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0240
In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150706594
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0241
In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-151456667
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0242
In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-151643722
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0243
In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-151644303
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0244
In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no clear exfiltration path, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145262423
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0245
In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-152496149
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0246
In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-159062405
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0247
In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1Android ID: A-156087409
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0248
In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-154627439
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0249
In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-154719656
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0250
In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to local information disclosure of location data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-154934934
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0256
In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}, {'name': '[debian-lts-announce] 20210208 [SECURITY] [DLA 2549-1] gdisk security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0257
In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0258
In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application that is started next with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-157598956
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/158869/Android-App-Zygotes-Improper-Guarding.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0259
In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157941353References: N/A
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0261
In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146059841
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-08-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0262
In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156353008
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0263
In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0264
In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-116718596
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0265
In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150155839
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0266
In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-111086459
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0267
In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilege due to launching a malicious app instead of the one the user intended, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139128211
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0268
In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148294643
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0269
In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645626
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0270
In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145790628
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0271
In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144507081
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0272
In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130166487
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0273
In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155646800
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0274
In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-120781925
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0275
In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This could lead to local escalation of privilege, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150507736
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0276
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253586
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0277
In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing a malicious app to modify the device's data plan with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148627993
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0279
In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-131430997
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0280
In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136565424
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0281
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execution privileges, a Firmware compromise, and User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137857778
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0282
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execution privileges, a Firmware compromise, and User interaction are needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144506224
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0284
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253784
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0285
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253479
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0286
In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150214479
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0287
In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141860394
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0288
In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153995991
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0289
In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996872
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0290
In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996866
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0291
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges and a compromised Firmware needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146032016
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0292
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges and a compromised Firmware needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-110107252
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0293
In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation in Android versions: Android-11, Android ID: A-141455849
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.usenix.org/conference/usenixsecurity19/presentation/reardon'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.usenix.org/system/files/sec19-reardon.pdf'}]
CVE State: PUBLISHED
Explain CVE-2020-0294
In bindWallpaperComponentLocked of WallpaperManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-154915372
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0295
In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155650969
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0296
In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153356209
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0297
In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155183624
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0298
In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129266
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0299
In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145130119
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0300
In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148736216
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0301
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124940460
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0302
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151646375
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0303
In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148223229
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0304
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645695
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0305
In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}, {'name': 'openSUSE-SU-2020:1153', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html'}, {'name': 'openSUSE-SU-2020:1236', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0306
In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139666480
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0307
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645867
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0308
In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0309
In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147227320
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0310
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153356468
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0311
In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153878642
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0312
In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153879099
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0313
In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154917989
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0314
In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934920
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0315
In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155642026
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0316
In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934919
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0317
In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119671929
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0318
In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-33646131
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0319
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137868765
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0320
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129282427
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0321
In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155171907
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0322
In apexd, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002540
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0323
In libavb, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146516087
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0324
In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136660304
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0325
In NFC, there is a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145079309
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0326
In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146453119
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0327
In core networking, there is a missing permission check. This could lead to local information disclosure of app network usage with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129151407
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0328
In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150156131
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0329
In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-63522940
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0330
In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150331085
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0331
In Settings, there is a possible permissions bypass. This could lead to local information disclosure of the device's IMEI with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147309310
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED