deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0016
Published: 2020-12-14
Description: In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0019
Published: 2020-12-14
Description: In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1188
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0456
Published: 2020-12-14
Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-35457
Published: 2020-12-14
Description: GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://gitlab.gnome.org/GNOME/glib/-/commit/63c5b62f0a984fac9a9700b12f54fe878e016a5d; https://gitlab.gnome.org/GNOME/glib/-/issues/2197; https://gitlab.gnome.org/GNOME/glib/-/releases/2.65.3
CVE: CVE-2020-35460
Published: 2020-12-14
Description: common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.mpxj.org/changes-report.html#a8.3.5; https://github.com/joniles/mpxj/commit/8eaf4225048ea5ba7e59ef4556dab2098fcc4a1d; https://www.oracle.com/security-alerts/cpujan2021.html
CVE: CVE-2020-35470
Published: 2020-12-15
Description: Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters).
CVSS Score: 8.8 (HIGH)
References: https://github.com/envoyproxy/envoy/compare/v1.16.0...v1.16.1; https://github.com/envoyproxy/envoy/issues/14087; https://github.com/envoyproxy/envoy/pull/14131
CVE: CVE-2020-35471
Published: 2020-12-15
Description: Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.
CVSS Score: 7.5 (HIGH)
References: https://github.com/envoyproxy/envoy/compare/v1.16.0...v1.16.1; https://github.com/envoyproxy/envoy/issues/14113; https://github.com/envoyproxy/envoy/pull/14122
CVE: CVE-2020-28442
Published: 2020-12-15
Description: All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function.
CVSS Score: 7.5 (HIGH)
References: https://github.com/js-data/js-data/blob/master/src/utils.js%23L417; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1050978; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050979
CVE: CVE-2020-28203
Published: 2020-12-15
Description: An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file, leading the application to crash (denial of service).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-4747
Published: 2020-12-15
Description: IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/188516; https://www.ibm.com/support/pages/node/6381904; https://exchange.xforce.ibmcloud.com/vulnerabilities/188516
CVE: CVE-2020-4849
Published: 2020-12-15
Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 190294.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190294; https://www.ibm.com/support/pages/node/6382116; https://exchange.xforce.ibmcloud.com/vulnerabilities/190294
CVE: CVE-2020-8935
Published: 2020-12-15
Description: An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://github.com/google/asylo/commit/ed0926bff0e423cd122a18b3d2fc772817f66825; https://github.com/google/asylo/commit/ed0926bff0e423cd122a18b3d2fc772817f66825
CVE: CVE-2020-8936
Published: 2020-12-15
Description: An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to validate the buffer range within sgx_params and allowed the host to return a pointer that was an address within the enclave memory. This allowed an attacker to read memory values from within the enclave.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/google/asylo/commit/83036fd841d33baa7e039f842d131aa7881fdcc2; https://github.com/google/asylo/commit/83036fd841d33baa7e039f842d131aa7881fdcc2
CVE: CVE-2020-8937
Published: 2020-12-15
Description: An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to enc_untrusted_create_wait_queue that uses a pointer queue that relies on UntrustedLocalMemcpy, which fails to validate where the pointer is located. This allows an attacker to write memory values from within the enclave. We recommend upgrading past commit a37fb6a0e7daf30134dbbf357c9a518a1026aa02
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://github.com/google/asylo/commit/a37fb6a0e7daf30134dbbf357c9a518a1026aa02; https://github.com/google/asylo/commit/a37fb6a0e7daf30134dbbf357c9a518a1026aa02
CVE: CVE-2020-8938
Published: 2020-12-15
Description: An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinux_addr which allows an attacker to write memory values from within the enclave. We recommend upgrading past commit a37fb6a0e7daf30134dbbf357c9a518a1026aa02
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: https://github.com/google/asylo/commit/bda9772e7872b0d2b9bee32930cf7a4983837b39; https://github.com/google/asylo/commit/bda9772e7872b0d2b9bee32930cf7a4983837b39
CVE: CVE-2020-8939
Published: 2020-12-15
Description: An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/google/asylo/commit/6ff3b77ffe110a33a2f93848a6333f33616f02c4; https://github.com/google/asylo/commit/6ff3b77ffe110a33a2f93848a6333f33616f02c4
CVE: CVE-2020-8940
Published: 2020-12-15
Description: An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker controlled result parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size including memory addresses within the secure enclave. We recommend upgrading or past commit fa6485c5d16a7355eab047d4a44345a73bc9131e
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-125
References: https://github.com/google/asylo/commit/fa6485c5d16a7355eab047d4a44345a73bc9131e; https://github.com/google/asylo/commit/fa6485c5d16a7355eab047d4a44345a73bc9131e
CVE: CVE-2020-8941
Published: 2020-12-15
Description: An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled klinux_addr_buffer parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size including memory addresses within the secure enclave. We recommend upgrading past commit 8fed5e334131abaf9c5e17307642fbf6ce4a57ec
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-125
References: https://github.com/google/asylo/commit/8fed5e334131abaf9c5e17307642fbf6ce4a57ec; https://github.com/google/asylo/commit/8fed5e334131abaf9c5e17307642fbf6ce4a57ec
CVE: CVE-2020-8942
Published: 2020-12-15
Description: An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against the requrested size. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size including memory addresses within the secure enclave. We recommend upgrading past commit b1d120a2c7d7446d2cc58d517e20a1b184b82200
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-125
References: https://github.com/google/asylo/commit/b1d120a2c7d7446d2cc58d517e20a1b184b82200; https://github.com/google/asylo/commit/b1d120a2c7d7446d2cc58d517e20a1b184b82200
CVE: CVE-2020-8943
Published: 2020-12-15
Description: An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size was not validated against the requested size. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size including memory addresses within the secure enclave. We recommend upgrading past commit 6e158d558abd3c29a0208e30c97c9a8c5bd4230f
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-125
References: https://github.com/google/asylo/commit/6e158d558abd3c29a0208e30c97c9a8c5bd4230f; https://github.com/google/asylo/commit/6e158d558abd3c29a0208e30c97c9a8c5bd4230f
CVE: CVE-2020-8944
Published: 2020-12-15
Description: An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check the range of a pointer. An attacker can use this pointer to write to arbitrary memory addresses including those within the secure enclave We recommend upgrading past commit 382da2b8b09cbf928668a2445efb778f76bd9c8a
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://github.com/google/asylo/commit/382da2b8b09cbf928668a2445efb778f76bd9c8a; https://github.com/google/asylo/commit/382da2b8b09cbf928668a2445efb778f76bd9c8a
CVE: CVE-2020-0244
Published: 2020-12-15
Description: In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no clear exfiltration path, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145262423
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0280
Published: 2020-12-15
Description: In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136565424
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0368
Published: 2020-12-15
Description: In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143230980
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://source.android.com/security/bulletin/2021-07-01; https://source.android.com/security/bulletin/2021-07-01
CVE: CVE-2020-0473
Published: 2020-12-15
Description: In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical possession of the device to transfer files to it over Bluetooth, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160691486
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0474
Published: 2020-12-15
Description: In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169282240
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0475
Published: 2020-12-15
Description: In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162324374
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0476
Published: 2020-12-15
Description: In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162014574
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0477
Published: 2020-12-15
Description: In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of the current network configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162246414
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0478
Published: 2020-12-15
Description: In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0479
Published: 2020-12-15
Description: In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a malicious app to access files available to the DocumentProvider without user permission, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157294893
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0480
Published: 2020-12-15
Description: In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing a caller to copy, move, or delete files accessible to DocumentsProvider with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157320716
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0481
Published: 2020-12-15
Description: In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a non-system app to send a broadcast it shouldn't have permissions to send, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157472962
CVSS Score: 3.3 (LOW)
CWE: CWE-863
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0482
Published: 2020-12-15
Description: In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150706572
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0483
Published: 2020-12-15
Description: In DrmManagerService::~DrmManagerService() of DrmManagerService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155647761
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0484
Published: 2020-12-15
Description: In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155769496
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0485
Published: 2020-12-15
Description: In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166125765
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0486
Published: 2020-12-15
Description: In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege to change contact data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150857116
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0487
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-0488
Published: 2020-12-15
Description: In ihevc_inter_pred_chroma_copy_ssse3 of ihevc_inter_pred_filters_ssse3_intr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158484516
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-909
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0489
Published: 2020-12-15
Description: In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151096540
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0490
Published: 2020-12-15
Description: In floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155560008
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0491
Published: 2020-12-15
Description: In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156819528
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0492
Published: 2020-12-15
Description: In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154058264
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01