Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2020-0431
In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-144161459
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}, {'name': 'openSUSE-SU-2020:1586', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html'}, {'name': 'openSUSE-SU-2020:1655', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0432
In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}, {'name': 'openSUSE-SU-2020:1586', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html'}, {'name': 'openSUSE-SU-2020:1655', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0433
In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151939299
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0434
In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150730508
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0437
In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. This could lead to local denial of service of emergency alerts with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-162741784
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0438
In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinder_ndk in a vulnerable way with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-161812320
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0439
In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This could lead to local escalation of privilege that allows instant apps access to permissions not allowed for instant apps, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-140256621
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0440
In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162627132
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0441
In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service requiring a device reset to fix with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-158304295
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0442
In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. This could lead to remote denial of service if a malicious contact file is received, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-147358092
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0443
In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-152410253
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0444
In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0448
In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153995334
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0449
In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-162497143
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0450
In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-157650336
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0451
In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9 Android-8.0 Android-8.1Android ID: A-158762825
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0452
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}, {'name': 'FEDORA-2020-e99ef3282f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVBD5JRUQPN4LQHTAAJHA3MR5M7YTAC7/'}, {'name': 'GLSA-202011-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202011-19'}, {'name': 'FEDORA-2020-0aa0fc1b0c', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELDZR6USD5PR34MRK2ZISLCYJ465FNKN/'}]
CVE State: PUBLISHED
Explain CVE-2020-0453
In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-8.0 Android-8.1Android ID: A-159060474
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0454
In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of the current SSID with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-161370134
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.usenix.org/conference/usenixsecurity19/presentation/reardon'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.usenix.org/system/files/sec19-reardon.pdf'}]
CVE State: PUBLISHED
Explain CVE-2020-0458
In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-160265164
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0459
In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-159373687
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0460
In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-163413737
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0463
In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-169342531
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0464
In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150371903
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0465
In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-162844689References: Upstream kernel
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0466
In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147802478References: Upstream kernel
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0467
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-168500792
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0468
In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-158484422
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0469
In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168692734
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0470
In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-166268541
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0471
In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-169327567.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2021-01-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0473
In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical possession of the device to transfer files to it over Bluetooth, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160691486
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0474
In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169282240
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0475
In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162324374
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0476
In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162014574
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0477
In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of the current network configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162246414
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0478
In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0479
In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a malicious app to access files available to the DocumentProvider without user permission, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157294893
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0480
In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing a caller to copy, move, or delete files accessible to DocumentsProvider with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157320716
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0481
In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a non-system app to send a broadcast it shouldn't have permissions to send, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157472962
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0482
In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150706572
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0483
In DrmManagerService::~DrmManagerService() of DrmManagerService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155647761
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0484
In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155769496
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0485
In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166125765
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0486
In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege to change contact data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150857116
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0488
In ihevc_inter_pred_chroma_copy_ssse3 of ihevc_inter_pred_filters_ssse3_intr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158484516
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0489
In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151096540
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0490
In floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155560008
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0491
In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156819528
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0492
In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154058264
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0493
In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150615407
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0494
In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-152895390
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0495
In decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155473137
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0496
In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp, there is a possible memory corruption due to a use-after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-149481220
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0497
In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0498
In decode_packed_entry_number of codebook.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160633884
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0499
In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}, {'name': '[debian-lts-announce] 20210104 [SECURITY] [DLA 2514-1] flac security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/01/msg00001.html'}, {'name': 'FEDORA-2021-df42ebeac2', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VPA5GAEKPXKAHGHHBI4X7AFNI4BMOVG3/'}, {'name': 'FEDORA-2021-ed9c13a1d5', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33W6XZAAEJYRGU3XYHRO7XSYEA7YACUB/'}, {'name': 'FEDORA-2021-a48ccc6754', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNZYTAU5UWBVXVJ4VHDWPR66ZVDLQZRE/'}, {'name': '[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E'}]
CVE State: PUBLISHED
Explain CVE-2020-0500
In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913391
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-12-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0501
Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0502
Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0503
Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0504
Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0505
Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure and denial of service via local
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0506
Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access.
Affected Products: Intel(R) Graphics Driver
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0507
Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable denial of service via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0508
Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0510
Out of bounds read in some Intel(R) Graphics Drivers before versions 15.45.31.5127 and 15.40.45.5126 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Products: Intel(R) Graphics Drivers Advisory
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0511
Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial of service via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0512
Uncaught exception in the system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potentially enable denial of service via local access.
Affected Products: Intel(R) Graphics Drivers Advisory
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0513
Out of bounds write for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Products: Intel(R) Graphics Drivers Advisory
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0514
Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0515
Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0516
Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable denial of service via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/156761/ShaderCache-Arbitrary-File-Creation-Privilege-Escalation.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0517
Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0518
Improper access control in the Intel(R) HD Graphics Control Panel before version 15.40.46.5144 and 15.36.39.5143 may allow an authenticated user to potentially enable denial of service via local access.
Affected Products: Intel(R) HD Graphics Control Panel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0519
Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0520
Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200320-0003/'}]
CVE State: PUBLISHED
Explain CVE-2020-0521
Insufficient control flow management in some Intel(R) Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Products: Intel(R) Graphics Drivers
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0522
Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via local access.
Affected Products: Intel(R) Ethernet I210 Controller series of network adapters
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00318.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0523
Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may potentially allow a privileged user to enable a denial of service via local access.
Affected Products: Intel(R) Ethernet I210 Controller series of network adapters
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00318.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0524
Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow an authenticated user to potentially enable denial of service via local access.
Affected Products: Intel(R) Ethernet I210 Controller series of network adapters
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00318.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0525
Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via local access.
Affected Products: Intel(R) Ethernet I210 Controller series of network adapters
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00318.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0526
Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
Affected Products: Intel(R) NUC Firmware
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0527
Insufficient control flow management in firmware for some Intel(R) Data Center SSDs may allow a privileged user to potentially enable information disclosure via local access.
Affected Products: Intel(R) SSD
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00266.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0528
Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
Affected Products: BIOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0529
Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access.
Affected Products: BIOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0530
Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
Affected Products: Intel(R) NUC Firmware
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html'}]
CVE State: PUBLISHED