|
213541
|
6.7 |
MEDIUM
Local
|
google
|
android
|
In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privilege in the TEE, with System execution pr…
|
CWE-269
Improper Privilege Management
|
CVE-2020-0403
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213542
|
7.8 |
HIGH
Local
|
google
|
android
|
In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to local escalation of privilege and account hijacking with no ad…
|
CWE-1021 CWE-862
Improper Restriction of Rendered UI Layers or Frames Missing Authorization
|
CVE-2020-0387
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213543
|
4.4 |
MEDIUM
Local
|
google
|
android
|
In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs (Initialization Vectors), 64-bit IVs are…
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2020-0407
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213544
|
5.5 |
MEDIUM
Local
|
google oracle
|
android communications_cloud_native_core_binding_support_function communications_cloud_native_core_policy communications_cloud_native_core_network_exposure_function
|
In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional e…
|
CWE-269
Improper Privilege Management
|
CVE-2020-0404
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213545
|
7.8 |
HIGH
Local
|
google
|
android
|
In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional ex…
|
CWE-862
Missing Authorization
|
CVE-2020-0401
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213546
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User e…
|
NVD-CWE-noinfo
|
CVE-2020-0399
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213547
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution…
|
NVD-CWE-noinfo
|
CVE-2020-0397
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213548
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User inter…
|
NVD-CWE-noinfo
|
CVE-2020-0396
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213549
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution pri…
|
NVD-CWE-noinfo
|
CVE-2020-0395
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213550
|
7.8 |
HIGH
Local
|
google
|
android
|
In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing co…
|
CWE-1021 CWE-1188
Improper Restriction of Rendered UI Layers or Frames Insecure Default Initialization of Resource
|
CVE-2020-0394
|
2024-11-21 13:53 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|