Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0318.

In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-33646131


Provide references for further information: Can you share references or external links related to CVE-2020-0318?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0318?


Explain the CVE ID: What does the identifier CVE-2020-0319 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0319.

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137868765


Provide references for further information: Can you share references or external links related to CVE-2020-0319?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0319?


Explain the CVE ID: What does the identifier CVE-2020-0320 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0320.

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129282427


Provide references for further information: Can you share references or external links related to CVE-2020-0320?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0320?


Explain the CVE ID: What does the identifier CVE-2020-0321 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0321.

In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155171907


Provide references for further information: Can you share references or external links related to CVE-2020-0321?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0321?


Explain the CVE ID: What does the identifier CVE-2020-0322 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0322.

In apexd, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002540


Provide references for further information: Can you share references or external links related to CVE-2020-0322?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0322?


Explain the CVE ID: What does the identifier CVE-2020-0323 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0323.

In libavb, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146516087


Provide references for further information: Can you share references or external links related to CVE-2020-0323?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0323?


Explain the CVE ID: What does the identifier CVE-2020-0324 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0324.

In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136660304


Provide references for further information: Can you share references or external links related to CVE-2020-0324?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0324?


Explain the CVE ID: What does the identifier CVE-2020-0325 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0325.

In NFC, there is a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145079309


Provide references for further information: Can you share references or external links related to CVE-2020-0325?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0325?


Explain the CVE ID: What does the identifier CVE-2020-0326 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0326.

In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146453119


Provide references for further information: Can you share references or external links related to CVE-2020-0326?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0326?


Explain the CVE ID: What does the identifier CVE-2020-0327 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0327.

In core networking, there is a missing permission check. This could lead to local information disclosure of app network usage with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129151407


Provide references for further information: Can you share references or external links related to CVE-2020-0327?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0327?


Explain the CVE ID: What does the identifier CVE-2020-0328 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0328.

In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150156131


Provide references for further information: Can you share references or external links related to CVE-2020-0328?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0328?


Explain the CVE ID: What does the identifier CVE-2020-0329 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0329.

In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-63522940


Provide references for further information: Can you share references or external links related to CVE-2020-0329?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0329?


Explain the CVE ID: What does the identifier CVE-2020-0330 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0330.

In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150331085


Provide references for further information: Can you share references or external links related to CVE-2020-0330?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0330?


Explain the CVE ID: What does the identifier CVE-2020-0331 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0331.

In Settings, there is a possible permissions bypass. This could lead to local information disclosure of the device's IMEI with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147309310


Provide references for further information: Can you share references or external links related to CVE-2020-0331?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0331?


Explain the CVE ID: What does the identifier CVE-2020-0332 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0332.

In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124783982


Provide references for further information: Can you share references or external links related to CVE-2020-0332?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0332?


Explain the CVE ID: What does the identifier CVE-2020-0333 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0333.

In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-73822755


Provide references for further information: Can you share references or external links related to CVE-2020-0333?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0333?


Explain the CVE ID: What does the identifier CVE-2020-0334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0334.

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147995915


Provide references for further information: Can you share references or external links related to CVE-2020-0334?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0334?


Explain the CVE ID: What does the identifier CVE-2020-0335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0335.

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-122361504


Provide references for further information: Can you share references or external links related to CVE-2020-0335?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0335?


Explain the CVE ID: What does the identifier CVE-2020-0336 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0336.

In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444


Provide references for further information: Can you share references or external links related to CVE-2020-0336?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0336?


Explain the CVE ID: What does the identifier CVE-2020-0337 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0337.

In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124329382


Provide references for further information: Can you share references or external links related to CVE-2020-0337?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0337?


Explain the CVE ID: What does the identifier CVE-2020-0338 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0338.

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-123700107


Provide references for further information: Can you share references or external links related to CVE-2020-0338?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2022-01-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0338?


Explain the CVE ID: What does the identifier CVE-2020-0339 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0339.

There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705


Provide references for further information: Can you share references or external links related to CVE-2020-0339?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0339?


Explain the CVE ID: What does the identifier CVE-2020-0340 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0340.

In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144901522


Provide references for further information: Can you share references or external links related to CVE-2020-0340?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0340?


Explain the CVE ID: What does the identifier CVE-2020-0341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0341.

In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144920149


Provide references for further information: Can you share references or external links related to CVE-2020-0341?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0341?


Explain the CVE ID: What does the identifier CVE-2020-0342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0342.

There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576


Provide references for further information: Can you share references or external links related to CVE-2020-0342?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0342?


Explain the CVE ID: What does the identifier CVE-2020-0343 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0343.

In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119672472


Provide references for further information: Can you share references or external links related to CVE-2020-0343?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0343?


Explain the CVE ID: What does the identifier CVE-2020-0344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0344.

In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140729887


Provide references for further information: Can you share references or external links related to CVE-2020-0344?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0344?


Explain the CVE ID: What does the identifier CVE-2020-0345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0345.

In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144286721


Provide references for further information: Can you share references or external links related to CVE-2020-0345?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0345?


Explain the CVE ID: What does the identifier CVE-2020-0346 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0346.

In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled (which it is by default), with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002762


Provide references for further information: Can you share references or external links related to CVE-2020-0346?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0346?


Explain the CVE ID: What does the identifier CVE-2020-0347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0347.

In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136658008


Provide references for further information: Can you share references or external links related to CVE-2020-0347?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0347?


Explain the CVE ID: What does the identifier CVE-2020-0348 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0348.

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139188582


Provide references for further information: Can you share references or external links related to CVE-2020-0348?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0348?


Explain the CVE ID: What does the identifier CVE-2020-0349 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0349.

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139188779


Provide references for further information: Can you share references or external links related to CVE-2020-0349?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0349?


Explain the CVE ID: What does the identifier CVE-2020-0350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0350.

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139424089


Provide references for further information: Can you share references or external links related to CVE-2020-0350?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0350?


Explain the CVE ID: What does the identifier CVE-2020-0351 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0351.

In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777537


Provide references for further information: Can you share references or external links related to CVE-2020-0351?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0351?


Explain the CVE ID: What does the identifier CVE-2020-0352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0352.

In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-132074310


Provide references for further information: Can you share references or external links related to CVE-2020-0352?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0352?


Explain the CVE ID: What does the identifier CVE-2020-0353 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0353.

In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777526


Provide references for further information: Can you share references or external links related to CVE-2020-0353?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0353?


Explain the CVE ID: What does the identifier CVE-2020-0354 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0354.

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143604331


Provide references for further information: Can you share references or external links related to CVE-2020-0354?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0354?


Explain the CVE ID: What does the identifier CVE-2020-0355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0355.

In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141883493


Provide references for further information: Can you share references or external links related to CVE-2020-0355?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0355?


Explain the CVE ID: What does the identifier CVE-2020-0356 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0356.

In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143787559


Provide references for further information: Can you share references or external links related to CVE-2020-0356?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0356?


Explain the CVE ID: What does the identifier CVE-2020-0357 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0357.

In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150225569


Provide references for further information: Can you share references or external links related to CVE-2020-0357?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0357?


Explain the CVE ID: What does the identifier CVE-2020-0358 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0358.

In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150227563


Provide references for further information: Can you share references or external links related to CVE-2020-0358?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0358?


Explain the CVE ID: What does the identifier CVE-2020-0359 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0359.

In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150303018


Provide references for further information: Can you share references or external links related to CVE-2020-0359?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0359?


Explain the CVE ID: What does the identifier CVE-2020-0360 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0360.

In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129456


Provide references for further information: Can you share references or external links related to CVE-2020-0360?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0360?


Explain the CVE ID: What does the identifier CVE-2020-0361 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0361.

In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151927433


Provide references for further information: Can you share references or external links related to CVE-2020-0361?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0361?


Explain the CVE ID: What does the identifier CVE-2020-0362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0362.

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123237930


Provide references for further information: Can you share references or external links related to CVE-2020-0362?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0362?


Explain the CVE ID: What does the identifier CVE-2020-0363 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0363.

In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-132274514


Provide references for further information: Can you share references or external links related to CVE-2020-0363?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0363?


Explain the CVE ID: What does the identifier CVE-2020-0364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0364.

In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282770


Provide references for further information: Can you share references or external links related to CVE-2020-0364?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0364?


Explain the CVE ID: What does the identifier CVE-2020-0365 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0365.

In netd, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137346580


Provide references for further information: Can you share references or external links related to CVE-2020-0365?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0365?


Explain the CVE ID: What does the identifier CVE-2020-0366 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0366.

In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local escalation of privilege using an app set as the default Assist app with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-138443815


Provide references for further information: Can you share references or external links related to CVE-2020-0366?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0366?


Explain the CVE ID: What does the identifier CVE-2020-0367 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0367.

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980455


Provide references for further information: Can you share references or external links related to CVE-2020-0367?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0367?


Explain the CVE ID: What does the identifier CVE-2020-0368 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0368.

In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143230980


Provide references for further information: Can you share references or external links related to CVE-2020-0368?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-07-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0368?


Explain the CVE ID: What does the identifier CVE-2020-0369 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0369.

In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130231426


Provide references for further information: Can you share references or external links related to CVE-2020-0369?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0369?


Explain the CVE ID: What does the identifier CVE-2020-0370 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0370.

In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-112051700


Provide references for further information: Can you share references or external links related to CVE-2020-0370?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0370?


Explain the CVE ID: What does the identifier CVE-2020-0371 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0371.

There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256


Provide references for further information: Can you share references or external links related to CVE-2020-0371?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0371?


Explain the CVE ID: What does the identifier CVE-2020-0372 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0372.

In ActivityManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119673147


Provide references for further information: Can you share references or external links related to CVE-2020-0372?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0372?


Explain the CVE ID: What does the identifier CVE-2020-0373 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0373.

In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146894086


Provide references for further information: Can you share references or external links related to CVE-2020-0373?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0373?


Explain the CVE ID: What does the identifier CVE-2020-0374 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0374.

In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156251602


Provide references for further information: Can you share references or external links related to CVE-2020-0374?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0374?


Explain the CVE ID: What does the identifier CVE-2020-0375 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0375.

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253476


Provide references for further information: Can you share references or external links related to CVE-2020-0375?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0375?


Explain the CVE ID: What does the identifier CVE-2020-0376 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0376.

There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163003156


Provide references for further information: Can you share references or external links related to CVE-2020-0376?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0376?


Explain the CVE ID: What does the identifier CVE-2020-0377 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0377.

In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158833854


Provide references for further information: Can you share references or external links related to CVE-2020-0377?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0377?


Explain the CVE ID: What does the identifier CVE-2020-0378 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0378.

In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-157748906


Provide references for further information: Can you share references or external links related to CVE-2020-0378?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0378?


Explain the CVE ID: What does the identifier CVE-2020-0379 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0379.

In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150156492


Provide references for further information: Can you share references or external links related to CVE-2020-0379?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0379?


Explain the CVE ID: What does the identifier CVE-2020-0380 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0380.

In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146398979


Provide references for further information: Can you share references or external links related to CVE-2020-0380?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0380?


Explain the CVE ID: What does the identifier CVE-2020-0381 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0381.

In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150159669


Provide references for further information: Can you share references or external links related to CVE-2020-0381?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0381?


Explain the CVE ID: What does the identifier CVE-2020-0382 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0382.

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488


Provide references for further information: Can you share references or external links related to CVE-2020-0382?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0382?


Explain the CVE ID: What does the identifier CVE-2020-0383 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0383.

In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the media extractor process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150160279


Provide references for further information: Can you share references or external links related to CVE-2020-0383?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0383?


Explain the CVE ID: What does the identifier CVE-2020-0384 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0384.

In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150159906


Provide references for further information: Can you share references or external links related to CVE-2020-0384?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0384?


Explain the CVE ID: What does the identifier CVE-2020-0385 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0385.

In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-150160041


Provide references for further information: Can you share references or external links related to CVE-2020-0385?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0385?


Explain the CVE ID: What does the identifier CVE-2020-0386 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0386.

In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege allowing an attacker to set Bluetooth discoverability with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155650356


Provide references for further information: Can you share references or external links related to CVE-2020-0386?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0386?


Explain the CVE ID: What does the identifier CVE-2020-0387 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0387.

In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to local escalation of privilege and account hijacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-156046804


Provide references for further information: Can you share references or external links related to CVE-2020-0387?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0387?


Explain the CVE ID: What does the identifier CVE-2020-0388 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0388.

In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-156123285


Provide references for further information: Can you share references or external links related to CVE-2020-0388?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0388?


Explain the CVE ID: What does the identifier CVE-2020-0389 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0389.

In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156959408


Provide references for further information: Can you share references or external links related to CVE-2020-0389?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0389?


Explain the CVE ID: What does the identifier CVE-2020-0390 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0390.

In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157598026


Provide references for further information: Can you share references or external links related to CVE-2020-0390?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0390?


Explain the CVE ID: What does the identifier CVE-2020-0391 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0391.

In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-158570769


Provide references for further information: Can you share references or external links related to CVE-2020-0391?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0391?


Explain the CVE ID: What does the identifier CVE-2020-0392 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0392.

In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-150226608


Provide references for further information: Can you share references or external links related to CVE-2020-0392?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0392?


Explain the CVE ID: What does the identifier CVE-2020-0393 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0393.

In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-154123412


Provide references for further information: Can you share references or external links related to CVE-2020-0393?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0393?


Explain the CVE ID: What does the identifier CVE-2020-0394 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0394.

In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing contact lists with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155648639


Provide references for further information: Can you share references or external links related to CVE-2020-0394?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0394?


Explain the CVE ID: What does the identifier CVE-2020-0395 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0395.

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-154124307


Provide references for further information: Can you share references or external links related to CVE-2020-0395?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0395?


Explain the CVE ID: What does the identifier CVE-2020-0396 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0396.

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155094269


Provide references for further information: Can you share references or external links related to CVE-2020-0396?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0396?


Explain the CVE ID: What does the identifier CVE-2020-0397 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0397.

In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155092443


Provide references for further information: Can you share references or external links related to CVE-2020-0397?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0397?


Explain the CVE ID: What does the identifier CVE-2020-0398 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0398.

In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-154323381


Provide references for further information: Can you share references or external links related to CVE-2020-0398?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0398?


Explain the CVE ID: What does the identifier CVE-2020-0399 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0399.

In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153993591


Provide references for further information: Can you share references or external links related to CVE-2020-0399?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0399?


Explain the CVE ID: What does the identifier CVE-2020-0400 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0400.

In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-153356561


Provide references for further information: Can you share references or external links related to CVE-2020-0400?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0400?


Explain the CVE ID: What does the identifier CVE-2020-0401 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0401.

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150857253


Provide references for further information: Can you share references or external links related to CVE-2020-0401?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0401?


Explain the CVE ID: What does the identifier CVE-2020-0403 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0403.

In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privilege in the TEE, with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-131252923


Provide references for further information: Can you share references or external links related to CVE-2020-0403?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0403?


Explain the CVE ID: What does the identifier CVE-2020-0404 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0404.

In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel


Provide references for further information: Can you share references or external links related to CVE-2020-0404?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}, {'name': 'openSUSE-SU-2020:1586', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html'}, {'name': 'openSUSE-SU-2020:1655', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0404?


Explain the CVE ID: What does the identifier CVE-2020-0405 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0405.

In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157475111


Provide references for further information: Can you share references or external links related to CVE-2020-0405?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0405?


Explain the CVE ID: What does the identifier CVE-2020-0406 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0406.

In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allowed this to be triggered with different parameters, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137794014


Provide references for further information: Can you share references or external links related to CVE-2020-0406?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0406?


Explain the CVE ID: What does the identifier CVE-2020-0407 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0407.

In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs (Initialization Vectors), 64-bit IVs are used and later are truncated to 32 bits. This may cause IV reuse and thus weakened disk encryption. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153450752References: N/A


Provide references for further information: Can you share references or external links related to CVE-2020-0407?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0407?


Explain the CVE ID: What does the identifier CVE-2020-0408 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0408.

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-156999009


Provide references for further information: Can you share references or external links related to CVE-2020-0408?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0408?


Explain the CVE ID: What does the identifier CVE-2020-0409 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0409.

In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-156997193


Provide references for further information: Can you share references or external links related to CVE-2020-0409?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0409?


Explain the CVE ID: What does the identifier CVE-2020-0410 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0410.

In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-156021269


Provide references for further information: Can you share references or external links related to CVE-2020-0410?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0410?


Explain the CVE ID: What does the identifier CVE-2020-0411 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0411.

In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-142641801


Provide references for further information: Can you share references or external links related to CVE-2020-0411?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0411?


Explain the CVE ID: What does the identifier CVE-2020-0412 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0412.

In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-160390416


Provide references for further information: Can you share references or external links related to CVE-2020-0412?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0412?


Explain the CVE ID: What does the identifier CVE-2020-0413 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0413.

In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158778659


Provide references for further information: Can you share references or external links related to CVE-2020-0413?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0413?


Explain the CVE ID: What does the identifier CVE-2020-0414 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0414.

In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157708122


Provide references for further information: Can you share references or external links related to CVE-2020-0414?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0414?


Explain the CVE ID: What does the identifier CVE-2020-0415 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0415.

In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795


Provide references for further information: Can you share references or external links related to CVE-2020-0415?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0415?


Explain the CVE ID: What does the identifier CVE-2020-0416 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0416.

In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-155288585


Provide references for further information: Can you share references or external links related to CVE-2020-0416?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0416?


Explain the CVE ID: What does the identifier CVE-2020-0417 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0417.

In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-154319182


Provide references for further information: Can you share references or external links related to CVE-2020-0417?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-07-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0417?


Explain the CVE ID: What does the identifier CVE-2020-0418 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0418.

In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153879813


Provide references for further information: Can you share references or external links related to CVE-2020-0418?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0418?


Explain the CVE ID: What does the identifier CVE-2020-0419 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0419.

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-142125338


Provide references for further information: Can you share references or external links related to CVE-2020-0419?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0419?


Explain the CVE ID: What does the identifier CVE-2020-0420 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0420.

In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162383705


Provide references for further information: Can you share references or external links related to CVE-2020-0420?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0420?


Explain the CVE ID: What does the identifier CVE-2020-0421 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0421.

In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161894517


Provide references for further information: Can you share references or external links related to CVE-2020-0421?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0421?


Explain the CVE ID: What does the identifier CVE-2020-0422 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0422.

In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161718556


Provide references for further information: Can you share references or external links related to CVE-2020-0422?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0422?


Explain the CVE ID: What does the identifier CVE-2020-0423 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0423.

In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161151868References: N/A


Provide references for further information: Can you share references or external links related to CVE-2020-0423?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-10-01'}, {'name': '[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0423?


Explain the CVE ID: What does the identifier CVE-2020-0424 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0424.

In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-161362564


Provide references for further information: Can you share references or external links related to CVE-2020-0424?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0424?


Explain the CVE ID: What does the identifier CVE-2020-0425 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0425.

There is a possible way to view notifications even when the "Lockdown" feature is on. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124000380


Provide references for further information: Can you share references or external links related to CVE-2020-0425?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0425?


Explain the CVE ID: What does the identifier CVE-2020-0426 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0426.

In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154921790


Provide references for further information: Can you share references or external links related to CVE-2020-0426?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0426?


Explain the CVE ID: What does the identifier CVE-2020-0427 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0427.

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171


Provide references for further information: Can you share references or external links related to CVE-2020-0427?

{'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}, {'name': 'openSUSE-SU-2020:1586', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html'}, {'name': 'openSUSE-SU-2020:1655', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html'}, {'name': '[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html'}, {'url': 'http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LSN-0074-1.html'}, {'url': 'https://www.starwindsoftware.com/security/sw-20210325-0005/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0427?


Explain the CVE ID: What does the identifier CVE-2020-0428 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0428.

In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-123999783


Provide references for further information: Can you share references or external links related to CVE-2020-0428?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0428?


Explain the CVE ID: What does the identifier CVE-2020-0429 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0429.

In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152735806


Provide references for further information: Can you share references or external links related to CVE-2020-0429?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0429?


Explain the CVE ID: What does the identifier CVE-2020-0430 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0430.

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554


Provide references for further information: Can you share references or external links related to CVE-2020-0430?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0430?


Explain the CVE ID: What does the identifier CVE-2020-0431 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0431.

In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-144161459


Provide references for further information: Can you share references or external links related to CVE-2020-0431?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-09-01'}, {'name': 'openSUSE-SU-2020:1586', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html'}, {'name': 'openSUSE-SU-2020:1655', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0431?


Explain the CVE ID: What does the identifier CVE-2020-0432 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0432.

In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807


Provide references for further information: Can you share references or external links related to CVE-2020-0432?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0432?


Explain the CVE ID: What does the identifier CVE-2020-0433 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0433.

In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151939299


Provide references for further information: Can you share references or external links related to CVE-2020-0433?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0433?


Explain the CVE ID: What does the identifier CVE-2020-0434 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0434.

In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150730508


Provide references for further information: Can you share references or external links related to CVE-2020-0434?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0434?


Explain the CVE ID: What does the identifier CVE-2020-0435 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0435.


Provide references for further information: Can you share references or external links related to CVE-2020-0435?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0435?


Explain the CVE ID: What does the identifier CVE-2020-0437 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0437.

In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. This could lead to local denial of service of emergency alerts with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-162741784


Provide references for further information: Can you share references or external links related to CVE-2020-0437?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0437?


Explain the CVE ID: What does the identifier CVE-2020-0438 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0438.

In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinder_ndk in a vulnerable way with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-161812320


Provide references for further information: Can you share references or external links related to CVE-2020-0438?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-11-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0438?


Explain the CVE ID: What does the identifier CVE-2020-0439 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0439.

In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This could lead to local escalation of privilege that allows instant apps access to permissions not allowed for instant apps, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-140256621


Provide references for further information: Can you share references or external links related to CVE-2020-0439?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0439?


Explain the CVE ID: What does the identifier CVE-2020-0440 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0440.

In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162627132


Provide references for further information: Can you share references or external links related to CVE-2020-0440?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0440?


Explain the CVE ID: What does the identifier CVE-2020-0441 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0441.

In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service requiring a device reset to fix with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-158304295


Provide references for further information: Can you share references or external links related to CVE-2020-0441?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0441?


Explain the CVE ID: What does the identifier CVE-2020-0442 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0442.

In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. This could lead to remote denial of service if a malicious contact file is received, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-147358092


Provide references for further information: Can you share references or external links related to CVE-2020-0442?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0442?


Explain the CVE ID: What does the identifier CVE-2020-0443 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0443.

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-152410253


Provide references for further information: Can you share references or external links related to CVE-2020-0443?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0443?


Explain the CVE ID: What does the identifier CVE-2020-0444 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0444.

In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel


Provide references for further information: Can you share references or external links related to CVE-2020-0444?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0444?


Explain the CVE ID: What does the identifier CVE-2020-0445 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0445.

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527


Provide references for further information: Can you share references or external links related to CVE-2020-0445?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0445?


Explain the CVE ID: What does the identifier CVE-2020-0446 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0446.

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528


Provide references for further information: Can you share references or external links related to CVE-2020-0446?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0446?


Explain the CVE ID: What does the identifier CVE-2020-0447 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0447.

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617


Provide references for further information: Can you share references or external links related to CVE-2020-0447?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0447?


Explain the CVE ID: What does the identifier CVE-2020-0448 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0448.

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153995334


Provide references for further information: Can you share references or external links related to CVE-2020-0448?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0448?


Explain the CVE ID: What does the identifier CVE-2020-0449 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0449.

In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-162497143


Provide references for further information: Can you share references or external links related to CVE-2020-0449?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0449?


Explain the CVE ID: What does the identifier CVE-2020-0450 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0450.

In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-157650336


Provide references for further information: Can you share references or external links related to CVE-2020-0450?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0450?


Explain the CVE ID: What does the identifier CVE-2020-0451 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0451.

In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9 Android-8.0 Android-8.1Android ID: A-158762825


Provide references for further information: Can you share references or external links related to CVE-2020-0451?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0451?


Explain the CVE ID: What does the identifier CVE-2020-0452 mean in the context of cybersecurity?