Patch days / January 2020

Android Security Bulletin — January 2020

Monday, 6 January 2020

Vulnerabilities: 15
Critical: 0
High: 0
Zero-days: 0
Public exploit: 3

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Public exploit code 3

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

Unscored
CVE-2020-0009 Public exploit In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of priv…
Unscored
CVE-2019-9465 Public exploit In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to local informat…
Unscored
CVE-2020-0001 Public exploit In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege with no addi…

All vulnerabilities 15

Unscored15 Show