deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-3987
Published: 2020-09-16
Description: VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://www.vmware.com/security/advisories/VMSA-2020-0020.html; https://www.vmware.com/security/advisories/VMSA-2020-0020.html
CVE: CVE-2020-3988
Published: 2020-09-16
Description: VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://www.vmware.com/security/advisories/VMSA-2020-0020.html; https://www.vmware.com/security/advisories/VMSA-2020-0020.html
CVE: CVE-2020-3989
Published: 2020-09-16
Description: VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial denial-of-service condition on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
CVSS Score: 3.3 (LOW)
CWE: CWE-787
References: https://www.vmware.com/security/advisories/VMSA-2020-0020.html; https://www.vmware.com/security/advisories/VMSA-2020-0020.html
CVE: CVE-2020-3990
Published: 2020-09-16
Description: VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-190
References: https://www.vmware.com/security/advisories/VMSA-2020-0020.html; https://www.vmware.com/security/advisories/VMSA-2020-0020.html
CVE: CVE-2020-10715
Published: 2020-09-16
Description: A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft a URL and inject arbitrary text onto the error page that appears to be from the OpenShift instance. This attack could potentially convince a user that the inserted text is legitimate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1767665; https://github.com/openshift/origin-web-console/pull/3173; https://bugzilla.redhat.com/show_bug.cgi?id=1767665
CVE: CVE-2020-10748
Published: 2020-09-16
Description: A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows an attacker to conduct cross-site scripting or further attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1836786; https://bugzilla.redhat.com/show_bug.cgi?id=1836786
CVE: CVE-2020-13928
Published: 2020-09-16
Description: Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.apache.org/thread.html/ra468036f913be41b0c8fea74f91d53e273b0bfa838a4b140a5dcd463%40%3Cuser.atlas.apache.org%3E; https://lists.apache.org/thread.html/ra468036f913be41b0c8fea74f91d53e273b0bfa838a4b140a5dcd463%40%3Cuser.atlas.apache.org%3E
CVE: CVE-2020-14306
Published: 2020-09-16
Description: An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. This flaw allows an attacker with a basic level of access to the cluster to deploy a custom gateway/pod to any namespace, potentially gaining access to privileged service account tokens. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://bugzilla.redhat.com/show_bug.cgi?id=1850380; https://github.com/maistra/istio-operator/pull/462; https://bugzilla.redhat.com/show_bug.cgi?id=1850380
CVE: CVE-2020-14348
Published: 2020-09-16
Description: It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating addresses, though this does not impact upon already existing messaging clients or brokers.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-248, CWE-754
References: https://bugzilla.redhat.com/show_bug.cgi?id=1861814; https://bugzilla.redhat.com/show_bug.cgi?id=1861814
CVE: CVE-2020-25015
Published: 2020-09-16
Description: A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to be vulnerable to Broken Access Control and CSRF which could be combined to remotely change the WIFI access point’s password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/159936/Genexis-Platinum-4410-P4410-V2-1.28-Missing-Access-Control-CSRF.html; https://www.getastra.com/blog/911/csrf-broken-access-control-in-genexis-platinum-4410/; https://www.jinsonvarghese.com/broken-access-control-csrf-in-genexis-platinum-4410/
CVE: CVE-2020-25039
Published: 2020-09-16
Description: Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-668
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00070.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00088.html; https://github.com/hpcng/singularity/security/advisories/GHSA-w6v2-qchm-grj7
CVE: CVE-2020-25040
Published: 2020-09-16
Description: Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulnerability than CVE-2020-25039.
CVSS Score: 8.8 (HIGH)
CWE: CWE-668
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00070.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00088.html; https://github.com/hpcng/singularity/security/advisories/GHSA-jv9c-w74q-6762
CVE: CVE-2020-10718
Published: 2020-09-16
Description: A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader (TCCL). This setting is exposed as a public method, which can bypass the security manager. The highest threat from this vulnerability is to confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://bugzilla.redhat.com/show_bug.cgi?id=1828476; https://bugzilla.redhat.com/show_bug.cgi?id=1828476
CVE: CVE-2020-13259
Published: 2020-09-16
Description: A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. This could be exploited in conjunction with CVE-2020-13260.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.exploit-db.com/exploits/48809; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2020-1694
Published: 2020-09-16
Description: A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-183, CWE-732
References: https://bugzilla.redhat.com/show_bug.cgi?id=1790759; https://bugzilla.redhat.com/show_bug.cgi?id=1790759
CVE: CVE-2020-6146
Published: 2020-09-16
Description: An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop sentinel when writing data into the member of an object. Due to the object member being a buffer of a static size allocated on the heap, this can result in a heap-based buffer overflow. A specially crafted document must be loaded by a victim in order to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1084; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1084
CVE: CVE-2020-6781
Published: 2020-09-16
Description: Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17.1 potentially allows to intercept video contents by performing a man-in-the-middle attack.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://psirt.bosch.com/security-advisories/BOSCH-SA-347336.html; https://psirt.bosch.com/security-advisories/BOSCH-SA-347336.html
CVE: CVE-2020-14509
Published: 2020-09-16
Description: Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-805
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01
CVE: CVE-2020-14513
Published: 2020-09-16
Description: CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unverified length fields.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01
CVE: CVE-2020-14515
Published: 2020-09-16
Description: CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license files, including forging a valid license file as if it were a valid license file of an existing vendor. Only CmActLicense update files with CmActLicense Firm Code are affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01
CVE: CVE-2020-14517
Published: 2020-09-16
Description: Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server) and the server accepts external connections, which may allow an attacker to remotely communicate with the CodeMeter API.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326, CWE-327
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01
CVE: CVE-2020-14519
Published: 2020-09-16
Description: This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected WebSockets API still enabled. This is especially relevant for systems or devices where a web browser is used to access a web server) via a specifically crafted Java Script payload, which may allow alteration or creation of license files for when combined with CVE-2020-14515.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01
CVE: CVE-2020-16233
Published: 2020-09-16
Description: An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01
CVE: CVE-2020-20406
Published: 2020-09-16
Description: A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom attributes.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/elementor/#developers; https://wordpress.org/plugins/elementor/#developers
CVE: CVE-2020-24373
Published: 2020-09-16
Description: A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://dev.freebox.fr/blog/?p=10222; https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/; https://dev.freebox.fr/blog/?p=10222
CVE: CVE-2020-24374
Published: 2020-09-16
Description: A DNS rebinding vulnerability in Freebox v5 before 1.5.29.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-20
References: https://dev.freebox.fr/blog/?p=10222; https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/; https://dev.freebox.fr/blog/?p=10222
CVE: CVE-2020-24376
Published: 2020-09-16
Description: A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-20
References: https://dev.freebox.fr/blog/?p=10222; https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/; https://dev.freebox.fr/blog/?p=10222
CVE: CVE-2020-24377
Published: 2020-09-16
Description: A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-20
References: https://dev.freebox.fr/blog/?p=10222; https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/; https://dev.freebox.fr/blog/?p=10222
CVE: CVE-2020-14181
Published: 2020-09-17
Description: Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. The affected versions are before version 7.13.6, from version 8.0.0 before 8.5.7, and from version 8.6.0 before 8.12.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/161730/Atlassian-JIRA-8.11.1-User-Enumeration.html; https://jira.atlassian.com/browse/JRASERVER-71560; http://packetstormsecurity.com/files/161730/Atlassian-JIRA-8.11.1-User-Enumeration.html
CVE: CVE-2020-8028
Published: 2020-09-17
Description: A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local users to escalate to root on every system managed by SUSE manager. On the managing node itself code can be executed as user salt, potentially allowing for escalation to root there. This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.1 google-gson versions prior to 2.8.5-3.4.3, httpcomponents-client-4.5.6-3.4.2, httpcomponents-. SUSE Manager Proxy 4.0 release-notes-susemanager-proxy versions prior to 4.0.9-0.16.38.1. SUSE Manager Retail Branch Server 4.0 release-notes-susemanager-proxy versions prior to 4.0.9-0.16.38.1. SUSE Manager Server 3.2 salt-netapi-client versions prior to 0.16.0-4.14.1, spacewalk-. SUSE Manager Server 4.0 release-notes-susemanager versions prior to 4.0.9-3.54.1.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-284
References: https://bugzilla.suse.com/show_bug.cgi?id=1175884; https://bugzilla.suse.com/show_bug.cgi?id=1175884
CVE: CVE-2020-13948
Published: 2020-09-17
Description: While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s `os` package in the web application process in versions < 0.37.1. It was thus possible for an authenticated user to list and access files, environment variables, and process information. Additionally it was possible to set environment variables for the current process, create and update files in folders writable by the web process, and execute arbitrary programs accessible by the web process. All other operations available to the `os` package in Python were also available, even if not explicitly enumerated in this CVE.
CVSS Score: 8.8 (HIGH)
References: https://lists.apache.org/thread.html/r0e35c7c5672a6146b962840be5c1a7b7461c05a71cd7ecc62774d155%40%3Cnotifications.superset.apache.org%3E; https://lists.apache.org/thread.html/r4fc7115f6e63ac255c48fc68c0da592df55fe4be47cae6378d39ac22%40%3Cnotifications.superset.apache.org%3E; https://lists.apache.org/thread.html/rdeee068ac1e0c43bd5b69830240f30598df15a2ef9f7998c7b29131e%40%3Cdev.superset.apache.org%3E
CVE: CVE-2020-6112
Published: 2020-09-17
Description: An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples. While initializing tiles with sub-sample data, the application can miscalculate a pointer for the stripes in the tile which allow for the decoder to write out of-bounds and cause memory corruption. This can result in code execution. A specially crafted image can be embedded inside a PDF and loaded by a victim in order to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-823
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1062; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1062
CVE: CVE-2020-6113
Published: 2020-09-17
Description: An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table. When processing an object stream from a PDF document, the application will perform a calculation in order to allocate memory for the list of indirect objects. Due to an error when calculating this size, an integer overflow may occur which can result in an undersized buffer being allocated. Later when initializing this buffer, the application can write outside its bounds which can cause a memory corruption that can lead to code execution. A specially crafted document can be delivered to a victim in order to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-131, CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1063; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1063
CVE: CVE-2020-6115
Published: 2020-09-17
Description: An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. While searching for an object identifier in a malformed document that is missing from the cross-reference table, the application will save a reference to the object’s cross-reference table entry inside a stack variable. If the referenced object identifier is not found, the application may resize the cross-reference table which can change the scope of its entry. Later when the application tries to reference cross-reference entry via the stack variable, the application will access memory belonging to the recently freed table causing a use-after-free condition. A specially crafted document can be delivered by an attacker and loaded by a victim in order to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1068; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1068
CVE: CVE-2020-6116
Published: 2020-09-17
Description: An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the contents of a page using colors from an indexed colorspace, the application can miscalculate the size of a buffer when allocating space for its colors. When using this allocated buffer, the application can write outside its bounds and cause memory corruption which can lead to code execution. A specially crafted document must be loaded by a victim in order to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-680, CWE-131, CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1070; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1070
CVE: CVE-2020-13944
Published: 2020-09-17
Description: In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/12/11/2; http://www.openwall.com/lists/oss-security/2021/05/01/2; https://lists.apache.org/thread.html/r2892ef594dbbf54d0939b808626f52f7c2d1584f8aa1d81570847d2a%40%3Cannounce.apache.org%3E
CVE: CVE-2020-14338
Published: 2020-09-17
Description: A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This issue is the same flaw as CVE-2020-14621, which affected OpenJDK, and uses a similar code. This flaw affects all Xerces JBoss versions before 2.12.0.SP3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1860054; https://lists.apache.org/thread.html/rf96c5afb26b596b4b97883aa90b6c0b0fc4c26aaeea7123c21912103%40%3Cj-users.xerces.apache.org%3E; https://bugzilla.redhat.com/show_bug.cgi?id=1860054
CVE: CVE-2020-0074
Published: 2020-09-17
Description: In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146204120
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0123
Published: 2020-09-17
Description: There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01