Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2020-0332
In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124783982
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0333
In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-73822755
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0334
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147995915
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0335
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-122361504
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0336
In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0337
In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124329382
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0338
In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-123700107
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2022-01-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0340
In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144901522
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0341
In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144920149
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0343
In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119672472
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0344
In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140729887
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0345
In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144286721
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0346
In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled (which it is by default), with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002762
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0347
In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136658008
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0348
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139188582
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0349
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139188779
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0350
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139424089
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0351
In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777537
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0352
In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-132074310
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0353
In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777526
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0354
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143604331
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0355
In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141883493
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0356
In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143787559
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0357
In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150225569
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0358
In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150227563
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0359
In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150303018
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0360
In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129456
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0361
In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151927433
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0362
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123237930
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0363
In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-132274514
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0364
In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282770
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0365
In netd, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137346580
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0366
In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local escalation of privilege using an app set as the default Assist app with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-138443815
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0368
In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143230980
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-07-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0369
In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130231426
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0370
In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-112051700
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0372
In ActivityManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119673147
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0373
In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146894086
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0374
In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156251602
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0375
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253476
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0377
In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158833854
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0378
In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-157748906
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0379
In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150156492
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0380
In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146398979
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0381
In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150159669
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0382
In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0383
In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the media extractor process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150160279
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0384
In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150159906
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0385
In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-150160041
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0386
In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege allowing an attacker to set Bluetooth discoverability with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155650356
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0387
In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to local escalation of privilege and account hijacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-156046804
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0388
In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-156123285
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0389
In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156959408
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0390
In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157598026
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0391
In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-158570769
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0392
In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-150226608
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0393
In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-154123412
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0394
In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing contact lists with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155648639
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0395
In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-154124307
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0396
In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155094269
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0397
In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155092443
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0398
In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-154323381
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0399
In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153993591
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0400
In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-153356561
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0401
In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150857253
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0403
In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privilege in the TEE, with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-131252923
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0404
In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}, {'name': 'openSUSE-SU-2020:1586', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html'}, {'name': 'openSUSE-SU-2020:1655', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0405
In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157475111
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0406
In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allowed this to be triggered with different parameters, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137794014
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0407
In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs (Initialization Vectors), 64-bit IVs are used and later are truncated to 32 bits. This may cause IV reuse and thus weakened disk encryption. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153450752References: N/A
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0408
In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-156999009
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0409
In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-156997193
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0410
In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-156021269
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0411
In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-142641801
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0412
In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-160390416
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0413
In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158778659
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0414
In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157708122
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0415
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0416
In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-155288585
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0417
In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-154319182
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-07-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0418
In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153879813
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0419
In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-142125338
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0420
In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162383705
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0421
In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161894517
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0422
In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161718556
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0423
In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161151868References: N/A
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}, {'name': '[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html'}]
CVE State: PUBLISHED
Explain CVE-2020-0424
In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-161362564
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0425
There is a possible way to view notifications even when the "Lockdown" feature is on. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124000380
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0426
In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154921790
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}]
CVE State: PUBLISHED
Explain CVE-2020-0427
In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171
Affected Products: Android
References: [{'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}, {'name': 'openSUSE-SU-2020:1586', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html'}, {'name': 'openSUSE-SU-2020:1655', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html'}, {'name': '[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html'}, {'url': 'http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LSN-0074-1.html'}, {'url': 'https://www.starwindsoftware.com/security/sw-20210325-0005/'}]
CVE State: PUBLISHED
Explain CVE-2020-0428
In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-123999783
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0429
In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152735806
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}]
CVE State: PUBLISHED
Explain CVE-2020-0430
In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554
Affected Products: Android
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}]
CVE State: PUBLISHED