Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, beliebigen Programmcode mit Administratorrechte auszuführen, einen Denial of Service Zustand zu verursachen oder Informationen offenzulegen.
Product
Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 57
-
Unscored —
u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, …
-
Unscored —
A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Andr…
-
Unscored —
u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug…
-
Unscored —
u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value …
-
Unscored —
u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size resul…
-
Unscored —
u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential i…
-
Unscored —
u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle t…
-
Unscored —
u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing…
-
Unscored —
u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon…
-
Unscored —
u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in Snapdragon Auto, Snapdrag…
-
Unscored —
u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-pro…
-
Unscored —
u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display sess…
-
Unscored —
u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition …
-
Unscored —
An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of v…
-
Unscored —CVE-2020-0108 Public exploit
In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an unca…
-
Unscored —
In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race con…
-
Unscored —
In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due t…
-
Unscored —CVE-2020-0240 Public exploit
In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could le…
-
Unscored —CVE-2020-0241 Public exploit
In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This…
-
Unscored —CVE-2020-0242 Public exploit
In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local es…
-
Unscored —
In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lea…
-
Unscored —
In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. Thi…
-
Unscored —
In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. …
-
Unscored —
In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. …
-
Unscored —
In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to…
-
Unscored —
There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID…
-
Unscored —
There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236…
-
Unscored —
There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647…
-
Unscored —
There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID…
-
Unscored —CVE-2020-0255 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-10751. Reason: This candidate is a duplicate of CVE-2020-10751. …
-
Unscored —
In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead…
-
Unscored —
In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. …
-
Unscored —
In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosur…
-
Unscored —
In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to…
-
Unscored —
There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID…
-
Unscored —
In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to loca…
-
Unscored —
u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from b…
-
Unscored —
u'Possible out of bound write while processing association response received from host due to lack of check of IE lengt…
-
Unscored —
u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, …
-
Unscored —
u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes th…
-
Unscored —
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' …
-
Unscored —
u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in…
-
Unscored —
usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer oc…
-
Unscored —
u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon …
-
Unscored —
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or…
-
Unscored —
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage …
-
Unscored —
u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Sna…
-
Unscored —
u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in inv…
-
Unscored —
u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Sna…
-
Unscored —
u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display …
-
Unscored —
u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Sn…
-
Unscored —
u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, …
-
Unscored —
u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute,…
-
Unscored —
u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' i…
-
Unscored —
u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while pa…
-
Unscored —
u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Sn…
-
Unscored —
u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute'…
Revision history
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von Red Hat aufgenommen
-
#4
Neue Updates von Debian aufgenommen
-
#3
Neue Updates von BLACKBERRY aufgenommen
-
#2
Rechtschreib Korrektur
-
#1
Initiale Fassung
References
-
Android Patchday August vom 2020-08-03
https://source.android.com/security/bulletin/2020-08-01
-
Pixel Patchday August vom 2020-08-03
https://source.android.com/security/bulletin/pixel/2020-08-01
-
BlackBerry Powered by Android Security Bulletin - September 2020
http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000069642
-
Debian Security Advisory DLA-2549 vom 2021-02-08
https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html
-
Red Hat Security Advisory RHSA-2022:7700 vom 2022-11-08
https://access.redhat.com/errata/RHSA-2022:7700
-
Red Hat Security Advisory RHSA-2024:3486 vom 2024-05-30
https://access.redhat.com/errata/RHSA-2024:3486