|
212201
|
4.4 |
MEDIUM
Local
|
google
|
android
|
In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User i…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-0044
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212202
|
4.4 |
MEDIUM
Local
|
google
|
android
|
In authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-0043
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212203
|
4.4 |
MEDIUM
Local
|
google
|
android
|
In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-0042
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212204
|
7.8 |
HIGH
Local
|
google
|
android
|
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges n…
|
CWE-20
Improper Input Validation
|
CVE-2020-0041
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212205
|
7.5 |
HIGH
Network
|
google
|
android
|
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution priv…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-0039
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212206
|
7.5 |
HIGH
Network
|
google
|
android
|
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution priv…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-0038
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212207
|
7.5 |
HIGH
Network
|
google
|
android
|
In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution p…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-0037
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212208
|
7.8 |
HIGH
Local
|
google
|
android
|
In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional exec…
|
CWE-863
Incorrect Authorization
|
CVE-2020-0036
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212209
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local information disclosure with no additional execution privile…
|
CWE-862
Missing Authorization
|
CVE-2020-0035
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212210
|
7.5 |
HIGH
Network
|
google debian
|
android debian_linux
|
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, wit…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-0034
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|