[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0028.

[Assistant] In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-122652057


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0028?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-02-01'}, {'name': '[karaf-issues] 20210810 [jira] [Updated] (KARAF-7240) Upgrade bcprov artifacts to mitigate CVE-2020-28052', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rfc0db1f3c375087e69a239f9284ded72d04fbb55849eadde58fa9dc2%40%3Cissues.karaf.apache.org%3E'}, {'name': '[karaf-issues] 20210810 [jira] [Commented] (KARAF-7240) Upgrade bcprov artifacts to mitigate CVE-2020-28052', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r77af3ac7c3bfbd5454546e13faf7aec21d627bdcf36c9ca240436b94%40%3Cissues.karaf.apache.org%3E'}, {'name': '[karaf-issues] 20210816 [jira] [Updated] (KARAF-7240) Upgrade bcprov artifacts to mitigate CVE-2020-28052', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rcd37d9214b08067a2e8f2b5b4fd123a1f8cb6008698d11ef44028c21%40%3Cissues.karaf.apache.org%3E'}, {'name': '[karaf-issues] 20210816 [jira] [Updated] (KARAF-7240) Upgrade bcprov 1.69 artifacts to mitigate CVE-2020-28052', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r167dbc42ef7c59802c2ca1ac14735ef9cf687c25208229993d6206fe%40%3Cissues.karaf.apache.org%3E'}, {'name': '[karaf-issues] 20210817 [jira] [Commented] (KARAF-7240) Upgrade bcprov 1.68 artifacts to mitigate CVE-2020-28052', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r4e1619cfefcd031fac62064a3858f5c9229eef907bd5d8ef14c594fc%40%3Cissues.karaf.apache.org%3E'}, {'name': '[karaf-issues] 20210817 [jira] [Updated] (KARAF-7240) Upgrade bcprov 1.68 artifacts to mitigate CVE-2020-28052', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r2ddabd06d94b60cfb0141e4abb23201c628ab925e30742f61a04d013%40%3Cissues.karaf.apache.org%3E'}, {'name': '[karaf-issues] 20210820 [jira] [Updated] (KARAF-7240) Upgrade bcprov 1.68 artifacts to mitigate CVE-2020-28052', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r30a139c165b3da6e0d5536434ab1550534011b1fdfcd2f5d95892c5b%40%3Cissues.karaf.apache.org%3E'}, {'name': '[karaf-issues] 20210824 [jira] [Commented] (KARAF-7240) Upgrade bcprov 1.68 artifacts to mitigate CVE-2020-28052', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf9abfc0223747a56694825c050cc6b66627a293a32ea926b3de22402%40%3Cissues.karaf.apache.org%3E'}, {'name': '[karaf-issues] 20210824 [jira] [Resolved] (KARAF-7240) Upgrade bcprov 1.68 artifacts to mitigate CVE-2020-28052', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rc9e441c1576bdc4375d32526d5cf457226928e9c87b9f54ded26271c%40%3Cissues.karaf.apache.org%3E'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0028?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0029 mean in the context of cybersecurity?

[Assistant] CVE-2020-0029


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0029.

[Assistant] In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a factory reset. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140065828


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0029?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0029?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0030 mean in the context of cybersecurity?

[Assistant] CVE-2020-0030


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0030.

[Assistant] In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145286050References: Upstream kernel


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0030?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-02-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0030?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0031 mean in the context of cybersecurity?

[Assistant] CVE-2020-0031


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0031.

[Assistant] In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141703197


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0031?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0031?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0032 mean in the context of cybersecurity?

[Assistant] CVE-2020-0032


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0032.

[Assistant] In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-145364230


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0032?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0032?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0033 mean in the context of cybersecurity?

[Assistant] CVE-2020-0033


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0033.

[Assistant] In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144351324


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0033?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0033?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0034 mean in the context of cybersecurity?

[Assistant] CVE-2020-0034


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0034.

[Assistant] In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0034?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}, {'name': 'openSUSE-SU-2020:0680', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00048.html'}, {'name': '[debian-lts-announce] 20211127 [SECURITY] [DLA 2829-1] libvpx security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/11/msg00024.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0034?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0035 mean in the context of cybersecurity?

[Assistant] CVE-2020-0035


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0035.

[Assistant] In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-140622024


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0035?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0035?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0036 mean in the context of cybersecurity?

[Assistant] CVE-2020-0036


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0036.

[Assistant] In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144679405


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0036?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0036?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0037 mean in the context of cybersecurity?

[Assistant] CVE-2020-0037


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0037.

[Assistant] In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143106535


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0037?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0037?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0038 mean in the context of cybersecurity?

[Assistant] CVE-2020-0038


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0038.

[Assistant] In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143109193


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0038?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0038?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0039 mean in the context of cybersecurity?

[Assistant] CVE-2020-0039


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0039.

[Assistant] In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143155861


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0039?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0039?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0041 mean in the context of cybersecurity?

[Assistant] CVE-2020-0041


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0041.

[Assistant] In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0041?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0041?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0042 mean in the context of cybersecurity?

[Assistant] CVE-2020-0042


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0042.

[Assistant] In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137649599


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0042?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0042?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0043 mean in the context of cybersecurity?

[Assistant] CVE-2020-0043


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0043.

[Assistant] In authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137650218


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0043?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0043?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0044 mean in the context of cybersecurity?

[Assistant] CVE-2020-0044


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0044.

[Assistant] In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137650219


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0044?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0044?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0045 mean in the context of cybersecurity?

[Assistant] CVE-2020-0045


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0045.

[Assistant] In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141243101


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0045?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0045?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0046 mean in the context of cybersecurity?

[Assistant] CVE-2020-0046


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0046.

[Assistant] In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137284652


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0046?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0046?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0047 mean in the context of cybersecurity?

[Assistant] CVE-2020-0047


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0047.

[Assistant] In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141622311


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0047?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0047?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0048 mean in the context of cybersecurity?

[Assistant] CVE-2020-0048


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0048.

[Assistant] In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139417189


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0048?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0048?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0049 mean in the context of cybersecurity?

[Assistant] CVE-2020-0049


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0049.

[Assistant] In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140177694


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0049?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0049?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0050 mean in the context of cybersecurity?

[Assistant] CVE-2020-0050


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0050.

[Assistant] In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124521372


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0050?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0050?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0051 mean in the context of cybersecurity?

[Assistant] CVE-2020-0051


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0051.

[Assistant] In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of privilege in Settings with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138442483


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0051?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0051?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0052 mean in the context of cybersecurity?

[Assistant] CVE-2020-0052


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0052.

[Assistant] In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137102479


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0052?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0052?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0053 mean in the context of cybersecurity?

[Assistant] CVE-2020-0053


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0053.

[Assistant] In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143789898


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0053?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0053?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0054 mean in the context of cybersecurity?

[Assistant] CVE-2020-0054


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0054.

[Assistant] In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146642727


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0054?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0054?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0055 mean in the context of cybersecurity?

[Assistant] CVE-2020-0055


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0055.

[Assistant] In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141617601


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0055?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00505.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0055?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0056 mean in the context of cybersecurity?

[Assistant] CVE-2020-0056


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0056.

[Assistant] In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141619686


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0056?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0056?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0057 mean in the context of cybersecurity?

[Assistant] CVE-2020-0057


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0057.

[Assistant] In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141620271


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0057?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0057?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0058 mean in the context of cybersecurity?

[Assistant] CVE-2020-0058


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0058.

[Assistant] In l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141745011


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0058?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0058?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0059 mean in the context of cybersecurity?

[Assistant] CVE-2020-0059


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0059.

[Assistant] In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142543524


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0059?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0059?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0060 mean in the context of cybersecurity?

[Assistant] CVE-2020-0060


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0060.

[Assistant] In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143229845


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0060?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0060?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0061 mean in the context of cybersecurity?

[Assistant] CVE-2020-0061


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0061.

[Assistant] In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145504977


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0061?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0061?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0062 mean in the context of cybersecurity?

[Assistant] CVE-2020-0062


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0062.

[Assistant] In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143232031


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0062?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0062?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0063 mean in the context of cybersecurity?

[Assistant] CVE-2020-0063


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0063.

[Assistant] In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143128911


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0063?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0063?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0064 mean in the context of cybersecurity?

[Assistant] CVE-2020-0064


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0064.

[Assistant] An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0064?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0064?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0065 mean in the context of cybersecurity?

[Assistant] CVE-2020-0065


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0065.

[Assistant] An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0065?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0065?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0066 mean in the context of cybersecurity?

[Assistant] CVE-2020-0066


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0066.

[Assistant] In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-65025077


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0066?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0066?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0067 mean in the context of cybersecurity?

[Assistant] CVE-2020-0067


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0067.

[Assistant] In f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation.Product: Android. Versions: Android kernel. Android ID: A-120551147.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0067?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-04-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://android.googlesource.com/kernel/common/+/688078e7'}, {'name': 'USN-4388-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4388-1/'}, {'name': 'USN-4389-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4389-1/'}, {'name': 'USN-4387-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4387-1/'}, {'name': 'USN-4390-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4390-1/'}, {'name': 'USN-4527-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4527-1/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/159565/Kernel-Live-Patch-Security-Notice-LSN-0072-1.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0067?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0068 mean in the context of cybersecurity?

[Assistant] CVE-2020-0068


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0068.

[Assistant] In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: Android. Versions: Android kernel. Android ID: A-139354541


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0068?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0068?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0069 mean in the context of cybersecurity?

[Assistant] CVE-2020-0069


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0069.

[Assistant] In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0069?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-mtk-en'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0069?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0070 mean in the context of cybersecurity?

[Assistant] CVE-2020-0070


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0070.

[Assistant] In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148159613


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0070?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0070?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0071 mean in the context of cybersecurity?

[Assistant] CVE-2020-0071


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0071.

[Assistant] In rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147310721


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0071?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0071?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0072 mean in the context of cybersecurity?

[Assistant] CVE-2020-0072


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0072.

[Assistant] In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147310271


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0072?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0072?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0073 mean in the context of cybersecurity?

[Assistant] CVE-2020-0073


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0073.

[Assistant] In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147309942


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0073?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0073?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0074 mean in the context of cybersecurity?

[Assistant] CVE-2020-0074


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0074.

[Assistant] In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146204120


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0074?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0074?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0075 mean in the context of cybersecurity?

[Assistant] CVE-2020-0075


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0075.

[Assistant] In set_shared_key of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146057864


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0075?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0075?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0076 mean in the context of cybersecurity?

[Assistant] CVE-2020-0076


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0076.

[Assistant] In get_auth_result of the FPC IRIS TrustZone app, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146056878


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0076?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0076?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0077 mean in the context of cybersecurity?

[Assistant] CVE-2020-0077


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0077.

[Assistant] In authorize_enroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146055840


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0077?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0077?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0078 mean in the context of cybersecurity?

[Assistant] CVE-2020-0078


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0078.

[Assistant] In releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144766455


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0078?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0078?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0079 mean in the context of cybersecurity?

[Assistant] CVE-2020-0079


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0079.

[Assistant] In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144506242


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0079?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0079?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0080 mean in the context of cybersecurity?

[Assistant] CVE-2020-0080


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0080.

[Assistant] In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144092031


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0080?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0080?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0081 mean in the context of cybersecurity?

[Assistant] CVE-2020-0081


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0081.

[Assistant] In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144028297


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0081?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}, {'name': 'FEDORA-2020-c9863904de', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0081?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0082 mean in the context of cybersecurity?

[Assistant] CVE-2020-0082


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0082.

[Assistant] In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140417434


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0082?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0082?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0083 mean in the context of cybersecurity?

[Assistant] CVE-2020-0083


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0083.

[Assistant] In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142797954


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0083?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0083?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0084 mean in the context of cybersecurity?

[Assistant] CVE-2020-0084


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0084.

[Assistant] In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143339775


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0084?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0084?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0085 mean in the context of cybersecurity?

[Assistant] CVE-2020-0085


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0085.

[Assistant] In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege to activate tethering with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-134487438


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0085?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0085?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0086 mean in the context of cybersecurity?

[Assistant] CVE-2020-0086


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0086.

[Assistant] In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code execution if IntSan were not enabled, which it is by default. No additional execution privileges are required. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-131859347


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0086?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/android-10'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0086?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0087 mean in the context of cybersecurity?

[Assistant] CVE-2020-0087


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0087.

[Assistant] In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127989044


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0087?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0087?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0088 mean in the context of cybersecurity?

[Assistant] CVE-2020-0088


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0088.

[Assistant] In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124389881


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0088?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0088?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0089 mean in the context of cybersecurity?

[Assistant] CVE-2020-0089


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0089.

[Assistant] In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137015603


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0089?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0089?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0090 mean in the context of cybersecurity?

[Assistant] CVE-2020-0090


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0090.

[Assistant] An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0090?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0090?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0091 mean in the context of cybersecurity?

[Assistant] CVE-2020-0091


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0091.

[Assistant] In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0091?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0091?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0092 mean in the context of cybersecurity?

[Assistant] CVE-2020-0092


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0092.

[Assistant] In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145135488


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0092?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0092?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0093 mean in the context of cybersecurity?

[Assistant] CVE-2020-0093


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0093.

[Assistant] In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0093?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}, {'name': '[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html'}, {'name': 'openSUSE-SU-2020:0793', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html'}, {'name': 'USN-4396-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4396-1/'}, {'name': 'GLSA-202007-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202007-05'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0093?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0094 mean in the context of cybersecurity?

[Assistant] CVE-2020-0094


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0094.

[Assistant] In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-148223871


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0094?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0094?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0096 mean in the context of cybersecurity?

[Assistant] CVE-2020-0096


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0096.

[Assistant] In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-145669109


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0096?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0096?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0097 mean in the context of cybersecurity?

[Assistant] CVE-2020-0097


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0097.

[Assistant] In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local escalation of privilege with User privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-145981139


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0097?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0097?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0098 mean in the context of cybersecurity?

[Assistant] CVE-2020-0098


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0098.

[Assistant] In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-144285917


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0098?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0098?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0099 mean in the context of cybersecurity?

[Assistant] CVE-2020-0099


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0099.

[Assistant] In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141745510


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0099?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0099?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0100 mean in the context of cybersecurity?

[Assistant] CVE-2020-0100


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0100.

[Assistant] In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disclosure of data from a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-8.0Android ID: A-150156584


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0100?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0100?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0101 mean in the context of cybersecurity?

[Assistant] CVE-2020-0101


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0101.

[Assistant] In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144767096


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0101?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0101?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0102 mean in the context of cybersecurity?

[Assistant] CVE-2020-0102


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0102.

[Assistant] In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143231677


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0102?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0102?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0103 mean in the context of cybersecurity?

[Assistant] CVE-2020-0103


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0103.

[Assistant] In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-148107188


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0103?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0103?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0104 mean in the context of cybersecurity?

[Assistant] CVE-2020-0104


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0104.

[Assistant] In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144430870


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0104?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0104?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0105 mean in the context of cybersecurity?

[Assistant] CVE-2020-0105


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0105.

[Assistant] In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps to use keyguard-bound keys when the screen is locked, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144285084


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0105?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0105?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0106 mean in the context of cybersecurity?

[Assistant] CVE-2020-0106


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0106.

[Assistant] In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148414207


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0106?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0106?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0107 mean in the context of cybersecurity?

[Assistant] CVE-2020-0107


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0107.

[Assistant] In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146570216


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0107?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2020-07-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0107?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0108 mean in the context of cybersecurity?

[Assistant] CVE-2020-0108


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0108.

[Assistant] In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-140108616


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0108?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0108?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0109 mean in the context of cybersecurity?

[Assistant] CVE-2020-0109


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0109.

[Assistant] In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-148059175


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0109?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0109?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0110 mean in the context of cybersecurity?

[Assistant] CVE-2020-0110


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0110.

[Assistant] In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-148159562References: Upstream kernel


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0110?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00533.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0110?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0113 mean in the context of cybersecurity?

[Assistant] CVE-2020-0113


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0113.

[Assistant] In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-150944913


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0113?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-06-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0113?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0114 mean in the context of cybersecurity?

[Assistant] CVE-2020-0114


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0114.

[Assistant] In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147606347


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0114?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-06-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0114?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0115 mean in the context of cybersecurity?

[Assistant] CVE-2020-0115


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0115.

[Assistant] In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150038428


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0115?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-06-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0115?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0116 mean in the context of cybersecurity?

[Assistant] CVE-2020-0116


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0116.

[Assistant] In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-151330809


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0116?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-06-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0116?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2020-0117 mean in the context of cybersecurity?

[Assistant] CVE-2020-0117


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0117.

[Assistant] In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2020-0117?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-06-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0117?

[Assistant] PUBLISHED