Page 94 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0338 | Medium | 5.0 | 2020-09-17 | In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution pri… |
CVE-2020-0337 | Medium | 5.5 | 2020-09-17 | In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with User execut… |
CVE-2020-0336 | Medium | 6.7 | 2020-09-17 | In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges… |
CVE-2020-0333 | Critical | 9.8 | 2020-09-17 | In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges needed. U… |
CVE-2020-0332 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution privile… |
CVE-2020-0330 | Medium | 6.7 | 2020-09-17 | In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execut… |
CVE-2020-0329 | Medium | 5.5 | 2020-09-17 | In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local information disclosure with no additional… |
CVE-2020-0328 | Medium | 4.4 | 2020-09-17 | In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privile… |
CVE-2020-0324 | Medium | 6.5 | 2020-09-17 | In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execut… |
CVE-2020-0323 | Medium | 5.5 | 2020-09-17 | In libavb, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution p… |
CVE-2020-0322 | Medium | 4.4 | 2020-09-17 | In apexd, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2020-0321 | High | 8.8 | 2020-09-17 | In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution… |
CVE-2020-0320 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2020-0317 | Medium | 5.5 | 2020-09-17 | In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no a… |
CVE-2020-0314 | Medium | 5.5 | 2020-09-17 | In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additional execution privi… |
CVE-2020-0312 | Medium | 5.5 | 2020-09-17 | In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution pri… |
CVE-2020-0308 | Medium | 5.5 | 2020-09-17 | In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution pr… |
CVE-2020-0306 | High | 7.8 | 2020-09-17 | In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no… |
CVE-2020-0303 | High | 8.8 | 2020-09-17 | In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execution in the media extractor with no add… |
CVE-2020-0301 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2020-0297 | Medium | 5.5 | 2020-09-17 | In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execut… |
CVE-2020-0296 | Medium | 5.5 | 2020-09-17 | In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User e… |
CVE-2020-0293 | Medium | 5.5 | 2020-09-17 | In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could lead to local information disclosure wi… |
CVE-2020-0290 | Medium | 5.5 | 2020-09-17 | In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges ne… |
CVE-2020-0289 | Medium | 5.5 | 2020-09-17 | In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges ne… |
CVE-2020-0288 | Medium | 5.5 | 2020-09-17 | In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boundaries with no additional execution pri… |
CVE-2020-0287 | Medium | 6.5 | 2020-09-17 | In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execu… |
CVE-2020-0279 | Medium | 6.5 | 2020-09-17 | In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional ex… |
CVE-2020-0277 | High | 7.8 | 2020-09-17 | In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allo… |
CVE-2020-0275 | High | 7.8 | 2020-09-17 | In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This c… |
CVE-2020-0274 | Medium | 5.5 | 2020-09-17 | In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local information disclosure with no additional… |
CVE-2020-0270 | Medium | 6.5 | 2020-09-17 | In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution… |
CVE-2020-0267 | High | 7.8 | 2020-09-17 | In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilege due to launching a… |
CVE-2020-0266 | High | 7.8 | 2020-09-17 | In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additio… |
CVE-2020-0264 | High | 8.8 | 2020-09-17 | In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution pr… |
CVE-2020-0130 | High | 7.8 | 2020-09-17 | In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system process with… |
CVE-2020-0125 | Medium | 5.5 | 2020-09-17 | In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution… |
CVE-2020-0434 | High | 7.8 | 2020-09-17 | In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no ad… |
CVE-2020-0433 | High | 7.8 | 2020-09-17 | In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit… |
CVE-2020-0432 | High | 7.8 | 2020-09-17 | In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no a… |
CVE-2020-0431 | Medium | 6.7 | 2020-09-17 | In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no a… |
CVE-2020-0430 | High | 7.8 | 2020-09-17 | In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege wi… |
CVE-2020-0429 | Medium | 6.7 | 2020-09-17 | In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation o… |
CVE-2020-0428 | Medium | 6.4 | 2020-09-17 | In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges req… |
CVE-2020-0427 | Medium | 5.5 | 2020-09-17 | In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional… |
CVE-2020-0403 | Medium | 6.7 | 2020-09-17 | In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privil… |
CVE-2020-0387 | High | 7.8 | 2020-09-17 | In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to local escalation of pr… |
CVE-2020-0407 | Medium | 4.4 | 2020-09-17 | In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs… |
CVE-2020-0404 | Medium | 5.5 | 2020-09-17 | In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of priv… |
CVE-2020-0401 | High | 7.8 | 2020-09-17 | In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting sp… |
CVE-2020-0399 | Medium | 5.5 | 2020-09-17 | In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to… |
CVE-2020-0397 | Medium | 5.5 | 2020-09-17 | In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local in… |
CVE-2020-0396 | Medium | 5.5 | 2020-09-17 | In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User… |
CVE-2020-0395 | Medium | 5.5 | 2020-09-17 | In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local inform… |
CVE-2020-0394 | High | 7.8 | 2020-09-17 | In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of priv… |
CVE-2020-0393 | Medium | 5.5 | 2020-09-17 | In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2020-0392 | High | 7.8 | 2020-09-17 | In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to local escalation of privilege with no a… |
CVE-2020-0391 | High | 7.8 | 2020-09-17 | In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead… |
CVE-2020-0390 | Medium | 5.5 | 2020-09-17 | In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges ne… |
CVE-2020-0389 | Medium | 5.5 | 2020-09-17 | In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information… |
CVE-2020-0388 | High | 7.8 | 2020-09-17 | In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This co… |
CVE-2020-0386 | Medium | 5.5 | 2020-09-17 | In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of p… |
CVE-2020-0385 | Medium | 5.5 | 2020-09-17 | In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the… |
CVE-2020-0384 | Medium | 5.5 | 2020-09-17 | In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the m… |
CVE-2020-0383 | Medium | 5.5 | 2020-09-17 | In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the medi… |
CVE-2020-0382 | Low | 2.3 | 2020-09-17 | In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug r… |
CVE-2020-0381 | High | 7.5 | 2020-09-17 | In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly c… |
CVE-2020-0380 | Critical | 9.8 | 2020-09-17 | In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no ad… |
CVE-2020-0379 | Medium | 5.7 | 2020-09-17 | In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information w… |
CVE-2020-0342 | Critical | 9.8 | 2020-09-17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576 |
CVE-2020-0278 | Critical | 9.8 | 2020-09-17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812574 |
CVE-2020-0245 | High | 8.8 | 2020-09-17 | In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information… |
CVE-2020-0229 | Critical | 9.8 | 2020-09-17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-156333725 |
CVE-2020-0123 | Critical | 9.8 | 2020-09-17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374 |
CVE-2020-0074 | High | 7.8 | 2020-09-17 | In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary d… |
CVE-2020-8927 | Medium | 5.3 | 2020-09-15 | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to… |
CVE-2020-25283 | Critical | 9.8 | 2020-09-11 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers to bypass intended access restrictions… |
CVE-2020-25282 | Critical | 9.8 | 2020-09-11 | An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software (for the LG Universal Integrated Circuit Card) allows attackers t… |
CVE-2020-25281 | High | 7.5 | 2020-09-11 | An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings (such as the p… |
CVE-2020-25280 | Medium | 6.8 | 2020-09-11 | An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets) software. Unauthenticated attackers can execute LTE/5G commands b… |
CVE-2020-25279 | Critical | 9.8 | 2020-09-11 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The baseband component has a buffer overflow via… |
CVE-2020-25278 | Critical | 9.8 | 2020-09-11 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory… |
CVE-2020-16873 | Medium | 4.7 | 2020-09-11 | <p>A spoofing vulnerability manifests in Microsoft Xamarin.Forms due to the default settings on Android WebView version prior to 83.0.4103.106. This vulnerabil… |
CVE-2020-25065 | High | 7.5 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may occur because of an… |
CVE-2020-25064 | High | 7.5 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Certain automated testing is mishand… |
CVE-2020-25063 | High | 7.5 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. An application crash can occur because of incorrect application… |
CVE-2020-25062 | Critical | 9.8 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG… |
CVE-2020-25061 | Critical | 9.8 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lge_property allows property overwrites. The LG ID is LVE-SM… |
CVE-2020-25060 | High | 7.8 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain privileges because of LAF and SBL1 flaws… |
CVE-2020-25059 | High | 7.5 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occur because of incorrect input validation… |
CVE-2020-25058 | Critical | 9.8 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management service does not properly restrict configurat… |
CVE-2020-25057 | Critical | 9.8 | 2020-08-31 | An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not properly restrict APK installations. The LG ID is LVE-SMP-200011… |
CVE-2020-25056 | High | 7.5 | 2020-08-31 | An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software. Because HAL improperly checks versions, bootloading by the S.LSI NFC chip… |
CVE-2020-25055 | Critical | 9.8 | 2020-08-31 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The persona service allows attackers (who control an unprivileged… |
CVE-2020-25053 | Critical | 9.8 | 2020-08-31 | An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-… |
CVE-2020-25052 | Critical | 9.8 | 2020-08-31 | An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H-Arx allows attackers to execute arbitrary code or cause a deni… |
CVE-2020-25051 | High | 7.5 | 2020-08-31 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via AppInfo. The Samsun… |
CVE-2020-25050 | High | 7.5 | 2020-08-31 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC service allows attackers to obtain sensitive information. The Samsu… |
CVE-2020-25049 | Critical | 9.8 | 2020-08-31 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. StatusBarService has insufficient DEX access control. The Samsung ID is SVE… |
CVE-2020-25048 | Medium | 4.6 | 2020-08-31 | An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticat… |