Explain the CVE ID: What does the identifier CVE-2020-0053 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0053.

In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143789898


Provide references for further information: Can you share references or external links related to CVE-2020-0053?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0053?


Explain the CVE ID: What does the identifier CVE-2020-0054 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0054.

In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146642727


Provide references for further information: Can you share references or external links related to CVE-2020-0054?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0054?


Explain the CVE ID: What does the identifier CVE-2020-0055 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0055.

In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141617601


Provide references for further information: Can you share references or external links related to CVE-2020-0055?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00505.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0055?


Explain the CVE ID: What does the identifier CVE-2020-0056 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0056.

In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141619686


Provide references for further information: Can you share references or external links related to CVE-2020-0056?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0056?


Explain the CVE ID: What does the identifier CVE-2020-0057 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0057.

In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141620271


Provide references for further information: Can you share references or external links related to CVE-2020-0057?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0057?


Explain the CVE ID: What does the identifier CVE-2020-0058 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0058.

In l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141745011


Provide references for further information: Can you share references or external links related to CVE-2020-0058?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0058?


Explain the CVE ID: What does the identifier CVE-2020-0059 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0059.

In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142543524


Provide references for further information: Can you share references or external links related to CVE-2020-0059?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0059?


Explain the CVE ID: What does the identifier CVE-2020-0060 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0060.

In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143229845


Provide references for further information: Can you share references or external links related to CVE-2020-0060?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0060?


Explain the CVE ID: What does the identifier CVE-2020-0061 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0061.

In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145504977


Provide references for further information: Can you share references or external links related to CVE-2020-0061?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0061?


Explain the CVE ID: What does the identifier CVE-2020-0062 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0062.

In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143232031


Provide references for further information: Can you share references or external links related to CVE-2020-0062?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0062?


Explain the CVE ID: What does the identifier CVE-2020-0063 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0063.

In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143128911


Provide references for further information: Can you share references or external links related to CVE-2020-0063?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0063?


Explain the CVE ID: What does the identifier CVE-2020-0064 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0064.

An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855


Provide references for further information: Can you share references or external links related to CVE-2020-0064?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0064?


Explain the CVE ID: What does the identifier CVE-2020-0065 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0065.

An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448


Provide references for further information: Can you share references or external links related to CVE-2020-0065?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0065?


Explain the CVE ID: What does the identifier CVE-2020-0066 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0066.

In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-65025077


Provide references for further information: Can you share references or external links related to CVE-2020-0066?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0066?


Explain the CVE ID: What does the identifier CVE-2020-0067 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0067.

In f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation.Product: Android. Versions: Android kernel. Android ID: A-120551147.


Provide references for further information: Can you share references or external links related to CVE-2020-0067?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-04-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://android.googlesource.com/kernel/common/+/688078e7'}, {'name': 'USN-4388-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4388-1/'}, {'name': 'USN-4389-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4389-1/'}, {'name': 'USN-4387-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4387-1/'}, {'name': 'USN-4390-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4390-1/'}, {'name': 'USN-4527-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4527-1/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/159565/Kernel-Live-Patch-Security-Notice-LSN-0072-1.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0067?


Explain the CVE ID: What does the identifier CVE-2020-0068 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0068.

In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: Android. Versions: Android kernel. Android ID: A-139354541


Provide references for further information: Can you share references or external links related to CVE-2020-0068?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-04-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0068?


Explain the CVE ID: What does the identifier CVE-2020-0069 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0069.

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754


Provide references for further information: Can you share references or external links related to CVE-2020-0069?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-03-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-mtk-en'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0069?


Explain the CVE ID: What does the identifier CVE-2020-0070 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0070.

In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148159613


Provide references for further information: Can you share references or external links related to CVE-2020-0070?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0070?


Explain the CVE ID: What does the identifier CVE-2020-0071 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0071.

In rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147310721


Provide references for further information: Can you share references or external links related to CVE-2020-0071?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0071?


Explain the CVE ID: What does the identifier CVE-2020-0072 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0072.

In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147310271


Provide references for further information: Can you share references or external links related to CVE-2020-0072?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0072?


Explain the CVE ID: What does the identifier CVE-2020-0073 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0073.

In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147309942


Provide references for further information: Can you share references or external links related to CVE-2020-0073?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0073?


Explain the CVE ID: What does the identifier CVE-2020-0074 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0074.

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146204120


Provide references for further information: Can you share references or external links related to CVE-2020-0074?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0074?


Explain the CVE ID: What does the identifier CVE-2020-0075 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0075.

In set_shared_key of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146057864


Provide references for further information: Can you share references or external links related to CVE-2020-0075?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0075?


Explain the CVE ID: What does the identifier CVE-2020-0076 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0076.

In get_auth_result of the FPC IRIS TrustZone app, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146056878


Provide references for further information: Can you share references or external links related to CVE-2020-0076?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0076?


Explain the CVE ID: What does the identifier CVE-2020-0077 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0077.

In authorize_enroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146055840


Provide references for further information: Can you share references or external links related to CVE-2020-0077?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0077?


Explain the CVE ID: What does the identifier CVE-2020-0078 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0078.

In releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144766455


Provide references for further information: Can you share references or external links related to CVE-2020-0078?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0078?


Explain the CVE ID: What does the identifier CVE-2020-0079 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0079.

In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144506242


Provide references for further information: Can you share references or external links related to CVE-2020-0079?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0079?


Explain the CVE ID: What does the identifier CVE-2020-0080 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0080.

In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144092031


Provide references for further information: Can you share references or external links related to CVE-2020-0080?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0080?


Explain the CVE ID: What does the identifier CVE-2020-0081 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0081.

In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144028297


Provide references for further information: Can you share references or external links related to CVE-2020-0081?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-04-01'}, {'name': 'FEDORA-2020-c9863904de', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0081?


Explain the CVE ID: What does the identifier CVE-2020-0082 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0082.

In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140417434


Provide references for further information: Can you share references or external links related to CVE-2020-0082?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0082?


Explain the CVE ID: What does the identifier CVE-2020-0083 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0083.

In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142797954


Provide references for further information: Can you share references or external links related to CVE-2020-0083?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-03-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0083?


Explain the CVE ID: What does the identifier CVE-2020-0084 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0084.

In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143339775


Provide references for further information: Can you share references or external links related to CVE-2020-0084?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0084?


Explain the CVE ID: What does the identifier CVE-2020-0085 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0085.

In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege to activate tethering with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-134487438


Provide references for further information: Can you share references or external links related to CVE-2020-0085?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0085?


Explain the CVE ID: What does the identifier CVE-2020-0086 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0086.

In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code execution if IntSan were not enabled, which it is by default. No additional execution privileges are required. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-131859347


Provide references for further information: Can you share references or external links related to CVE-2020-0086?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/android-10'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0086?


Explain the CVE ID: What does the identifier CVE-2020-0087 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0087.

In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127989044


Provide references for further information: Can you share references or external links related to CVE-2020-0087?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0087?


Explain the CVE ID: What does the identifier CVE-2020-0088 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0088.

In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124389881


Provide references for further information: Can you share references or external links related to CVE-2020-0088?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0088?


Explain the CVE ID: What does the identifier CVE-2020-0089 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0089.

In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137015603


Provide references for further information: Can you share references or external links related to CVE-2020-0089?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0089?


Explain the CVE ID: What does the identifier CVE-2020-0090 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0090.

An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048


Provide references for further information: Can you share references or external links related to CVE-2020-0090?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0090?


Explain the CVE ID: What does the identifier CVE-2020-0091 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0091.

In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700


Provide references for further information: Can you share references or external links related to CVE-2020-0091?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0091?


Explain the CVE ID: What does the identifier CVE-2020-0092 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0092.

In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145135488


Provide references for further information: Can you share references or external links related to CVE-2020-0092?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0092?


Explain the CVE ID: What does the identifier CVE-2020-0093 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0093.

In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132


Provide references for further information: Can you share references or external links related to CVE-2020-0093?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}, {'name': '[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html'}, {'name': 'openSUSE-SU-2020:0793', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html'}, {'name': 'USN-4396-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4396-1/'}, {'name': 'GLSA-202007-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202007-05'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0093?


Explain the CVE ID: What does the identifier CVE-2020-0094 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0094.

In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-148223871


Provide references for further information: Can you share references or external links related to CVE-2020-0094?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0094?


Explain the CVE ID: What does the identifier CVE-2020-0096 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0096.

In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-145669109


Provide references for further information: Can you share references or external links related to CVE-2020-0096?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0096?


Explain the CVE ID: What does the identifier CVE-2020-0097 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0097.

In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local escalation of privilege with User privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-145981139


Provide references for further information: Can you share references or external links related to CVE-2020-0097?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0097?


Explain the CVE ID: What does the identifier CVE-2020-0098 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0098.

In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-144285917


Provide references for further information: Can you share references or external links related to CVE-2020-0098?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0098?


Explain the CVE ID: What does the identifier CVE-2020-0099 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0099.

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141745510


Provide references for further information: Can you share references or external links related to CVE-2020-0099?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-12-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0099?


Explain the CVE ID: What does the identifier CVE-2020-0100 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0100.

In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disclosure of data from a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-8.0Android ID: A-150156584


Provide references for further information: Can you share references or external links related to CVE-2020-0100?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0100?


Explain the CVE ID: What does the identifier CVE-2020-0101 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0101.

In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144767096


Provide references for further information: Can you share references or external links related to CVE-2020-0101?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0101?


Explain the CVE ID: What does the identifier CVE-2020-0102 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0102.

In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143231677


Provide references for further information: Can you share references or external links related to CVE-2020-0102?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0102?


Explain the CVE ID: What does the identifier CVE-2020-0103 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0103.

In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-148107188


Provide references for further information: Can you share references or external links related to CVE-2020-0103?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0103?


Explain the CVE ID: What does the identifier CVE-2020-0104 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0104.

In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144430870


Provide references for further information: Can you share references or external links related to CVE-2020-0104?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0104?


Explain the CVE ID: What does the identifier CVE-2020-0105 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0105.

In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps to use keyguard-bound keys when the screen is locked, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144285084


Provide references for further information: Can you share references or external links related to CVE-2020-0105?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0105?


Explain the CVE ID: What does the identifier CVE-2020-0106 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0106.

In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148414207


Provide references for further information: Can you share references or external links related to CVE-2020-0106?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0106?


Explain the CVE ID: What does the identifier CVE-2020-0107 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0107.

In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146570216


Provide references for further information: Can you share references or external links related to CVE-2020-0107?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2020-07-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0107?


Explain the CVE ID: What does the identifier CVE-2020-0108 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0108.

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-140108616


Provide references for further information: Can you share references or external links related to CVE-2020-0108?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-08-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0108?


Explain the CVE ID: What does the identifier CVE-2020-0109 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0109.

In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-148059175


Provide references for further information: Can you share references or external links related to CVE-2020-0109?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0109?


Explain the CVE ID: What does the identifier CVE-2020-0110 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0110.

In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-148159562References: Upstream kernel


Provide references for further information: Can you share references or external links related to CVE-2020-0110?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-05-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00533.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0110?


Explain the CVE ID: What does the identifier CVE-2020-0113 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0113.

In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-150944913


Provide references for further information: Can you share references or external links related to CVE-2020-0113?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0113?


Explain the CVE ID: What does the identifier CVE-2020-0114 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0114.

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147606347


Provide references for further information: Can you share references or external links related to CVE-2020-0114?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0114?


Explain the CVE ID: What does the identifier CVE-2020-0115 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0115.

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150038428


Provide references for further information: Can you share references or external links related to CVE-2020-0115?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0115?


Explain the CVE ID: What does the identifier CVE-2020-0116 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0116.

In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-151330809


Provide references for further information: Can you share references or external links related to CVE-2020-0116?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0116?


Explain the CVE ID: What does the identifier CVE-2020-0117 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0117.

In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194


Provide references for further information: Can you share references or external links related to CVE-2020-0117?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0117?


Explain the CVE ID: What does the identifier CVE-2020-0118 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0118.

In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150904694


Provide references for further information: Can you share references or external links related to CVE-2020-0118?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0118?


Explain the CVE ID: What does the identifier CVE-2020-0119 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0119.

In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150500247


Provide references for further information: Can you share references or external links related to CVE-2020-0119?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0119?


Explain the CVE ID: What does the identifier CVE-2020-0120 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0120.

In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-149995442


Provide references for further information: Can you share references or external links related to CVE-2020-0120?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0120?


Explain the CVE ID: What does the identifier CVE-2020-0121 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0121.

In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148180766


Provide references for further information: Can you share references or external links related to CVE-2020-0121?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0121?


Explain the CVE ID: What does the identifier CVE-2020-0122 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0122.

In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147247775


Provide references for further information: Can you share references or external links related to CVE-2020-0122?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2020-07-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0122?


Explain the CVE ID: What does the identifier CVE-2020-0123 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0123.

There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374


Provide references for further information: Can you share references or external links related to CVE-2020-0123?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2020-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0123?


Explain the CVE ID: What does the identifier CVE-2020-0124 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0124.

In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140237592


Provide references for further information: Can you share references or external links related to CVE-2020-0124?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0124?


Explain the CVE ID: What does the identifier CVE-2020-0125 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0125.

In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282168


Provide references for further information: Can you share references or external links related to CVE-2020-0125?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/android-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0125?


Explain the CVE ID: What does the identifier CVE-2020-0126 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0126.

In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930


Provide references for further information: Can you share references or external links related to CVE-2020-0126?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0126?


Explain the CVE ID: What does the identifier CVE-2020-0127 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0127.

In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140054506


Provide references for further information: Can you share references or external links related to CVE-2020-0127?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0127?


Explain the CVE ID: What does the identifier CVE-2020-0128 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0128.

In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123940919


Provide references for further information: Can you share references or external links related to CVE-2020-0128?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0128?


Explain the CVE ID: What does the identifier CVE-2020-0129 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0129.

In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123292010


Provide references for further information: Can you share references or external links related to CVE-2020-0129?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0129?


Explain the CVE ID: What does the identifier CVE-2020-0130 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0130.

In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system process with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123230379


Provide references for further information: Can you share references or external links related to CVE-2020-0130?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0130?


Explain the CVE ID: What does the identifier CVE-2020-0131 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0131.

In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-151159638


Provide references for further information: Can you share references or external links related to CVE-2020-0131?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0131?


Explain the CVE ID: What does the identifier CVE-2020-0132 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0132.

In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139473816


Provide references for further information: Can you share references or external links related to CVE-2020-0132?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0132?


Explain the CVE ID: What does the identifier CVE-2020-0133 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0133.

In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145136060


Provide references for further information: Can you share references or external links related to CVE-2020-0133?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0133?


Explain the CVE ID: What does the identifier CVE-2020-0134 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0134.

In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146052771


Provide references for further information: Can you share references or external links related to CVE-2020-0134?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0134?


Explain the CVE ID: What does the identifier CVE-2020-0135 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0135.

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150949837


Provide references for further information: Can you share references or external links related to CVE-2020-0135?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0135?


Explain the CVE ID: What does the identifier CVE-2020-0136 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0136.

In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-120078455


Provide references for further information: Can you share references or external links related to CVE-2020-0136?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0136?


Explain the CVE ID: What does the identifier CVE-2020-0137 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0137.

In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141920289


Provide references for further information: Can you share references or external links related to CVE-2020-0137?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0137?


Explain the CVE ID: What does the identifier CVE-2020-0138 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0138.

In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if bluetoothtbd were used, which it isn't in typical Android platforms, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142878416


Provide references for further information: Can you share references or external links related to CVE-2020-0138?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0138?


Explain the CVE ID: What does the identifier CVE-2020-0139 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0139.

In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. System execution privileges are needed and user interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145520471


Provide references for further information: Can you share references or external links related to CVE-2020-0139?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0139?


Explain the CVE ID: What does the identifier CVE-2020-0140 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0140.

In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146053215


Provide references for further information: Can you share references or external links related to CVE-2020-0140?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0140?


Explain the CVE ID: What does the identifier CVE-2020-0141 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0141.

In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. This could lead to remote information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544793


Provide references for further information: Can you share references or external links related to CVE-2020-0141?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0141?


Explain the CVE ID: What does the identifier CVE-2020-0142 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0142.

In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146435761


Provide references for further information: Can you share references or external links related to CVE-2020-0142?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0142?


Explain the CVE ID: What does the identifier CVE-2020-0143 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0143.

In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of heap data via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145597277


Provide references for further information: Can you share references or external links related to CVE-2020-0143?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0143?


Explain the CVE ID: What does the identifier CVE-2020-0144 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0144.

In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142543497


Provide references for further information: Can you share references or external links related to CVE-2020-0144?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0144?


Explain the CVE ID: What does the identifier CVE-2020-0145 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0145.

In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544079


Provide references for further information: Can you share references or external links related to CVE-2020-0145?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0145?


Explain the CVE ID: What does the identifier CVE-2020-0146 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0146.

In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142546561


Provide references for further information: Can you share references or external links related to CVE-2020-0146?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0146?


Explain the CVE ID: What does the identifier CVE-2020-0147 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0147.

In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142638392


Provide references for further information: Can you share references or external links related to CVE-2020-0147?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0147?


Explain the CVE ID: What does the identifier CVE-2020-0148 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0148.

In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142638492


Provide references for further information: Can you share references or external links related to CVE-2020-0148?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0148?


Explain the CVE ID: What does the identifier CVE-2020-0149 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0149.

In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544089


Provide references for further information: Can you share references or external links related to CVE-2020-0149?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0149?


Explain the CVE ID: What does the identifier CVE-2020-0150 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0150.

In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142280329


Provide references for further information: Can you share references or external links related to CVE-2020-0150?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0150?


Explain the CVE ID: What does the identifier CVE-2020-0151 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0151.

In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-133164384


Provide references for further information: Can you share references or external links related to CVE-2020-0151?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0151?


Explain the CVE ID: What does the identifier CVE-2020-0152 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0152.

In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145992159


Provide references for further information: Can you share references or external links related to CVE-2020-0152?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0152?


Explain the CVE ID: What does the identifier CVE-2020-0153 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0153.

In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139733543


Provide references for further information: Can you share references or external links related to CVE-2020-0153?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0153?


Explain the CVE ID: What does the identifier CVE-2020-0154 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0154.

In nci_proc_core_rsp of nci_hrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141550919


Provide references for further information: Can you share references or external links related to CVE-2020-0154?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0154?


Explain the CVE ID: What does the identifier CVE-2020-0155 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0155.

In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736386


Provide references for further information: Can you share references or external links related to CVE-2020-0155?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0155?


Explain the CVE ID: What does the identifier CVE-2020-0156 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0156.

In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736127


Provide references for further information: Can you share references or external links related to CVE-2020-0156?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0156?


Explain the CVE ID: What does the identifier CVE-2020-0157 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0157.

In nfa_hci_conn_cback of nfa_hci_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139740814


Provide references for further information: Can you share references or external links related to CVE-2020-0157?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0157?


Explain the CVE ID: What does the identifier CVE-2020-0158 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0158.

In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141547128


Provide references for further information: Can you share references or external links related to CVE-2020-0158?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0158?


Explain the CVE ID: What does the identifier CVE-2020-0159 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0159.

In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140768035


Provide references for further information: Can you share references or external links related to CVE-2020-0159?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0159?


Explain the CVE ID: What does the identifier CVE-2020-0160 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0160.

In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124771364


Provide references for further information: Can you share references or external links related to CVE-2020-0160?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0160?


Explain the CVE ID: What does the identifier CVE-2020-0161 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0161.

In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127973550


Provide references for further information: Can you share references or external links related to CVE-2020-0161?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0161?


Explain the CVE ID: What does the identifier CVE-2020-0162 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0162.

In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124526959


Provide references for further information: Can you share references or external links related to CVE-2020-0162?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0162?


Explain the CVE ID: What does the identifier CVE-2020-0163 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0163.

In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124525515


Provide references for further information: Can you share references or external links related to CVE-2020-0163?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0163?


Explain the CVE ID: What does the identifier CVE-2020-0164 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0164.

In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736125


Provide references for further information: Can you share references or external links related to CVE-2020-0164?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0164?


Explain the CVE ID: What does the identifier CVE-2020-0165 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0165.

In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139532977


Provide references for further information: Can you share references or external links related to CVE-2020-0165?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0165?


Explain the CVE ID: What does the identifier CVE-2020-0166 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0166.

In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI information. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124526860


Provide references for further information: Can you share references or external links related to CVE-2020-0166?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0166?


Explain the CVE ID: What does the identifier CVE-2020-0167 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0167.

In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-129475100


Provide references for further information: Can you share references or external links related to CVE-2020-0167?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0167?


Explain the CVE ID: What does the identifier CVE-2020-0168 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0168.

In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137798382


Provide references for further information: Can you share references or external links related to CVE-2020-0168?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0168?


Explain the CVE ID: What does the identifier CVE-2020-0169 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0169.

In RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123700383


Provide references for further information: Can you share references or external links related to CVE-2020-0169?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0169?


Explain the CVE ID: What does the identifier CVE-2020-0170 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0170.

In IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127310810


Provide references for further information: Can you share references or external links related to CVE-2020-0170?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0170?


Explain the CVE ID: What does the identifier CVE-2020-0171 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0171.

In Parse_lart of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313223


Provide references for further information: Can you share references or external links related to CVE-2020-0171?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0171?


Explain the CVE ID: What does the identifier CVE-2020-0172 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0172.

In Parse_art of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127312550


Provide references for further information: Can you share references or external links related to CVE-2020-0172?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0172?


Explain the CVE ID: What does the identifier CVE-2020-0173 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0173.

In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313764


Provide references for further information: Can you share references or external links related to CVE-2020-0173?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0173?


Explain the CVE ID: What does the identifier CVE-2020-0174 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0174.

In Parse_ptbl of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313537


Provide references for further information: Can you share references or external links related to CVE-2020-0174?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0174?


Explain the CVE ID: What does the identifier CVE-2020-0175 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0175.

In XMF_ReadNode of eas_xmf.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126380818


Provide references for further information: Can you share references or external links related to CVE-2020-0175?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0175?


Explain the CVE ID: What does the identifier CVE-2020-0176 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0176.

In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-79702484


Provide references for further information: Can you share references or external links related to CVE-2020-0176?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0176?


Explain the CVE ID: What does the identifier CVE-2020-0177 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0177.

In connect() of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privilege to change network connection settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126206353


Provide references for further information: Can you share references or external links related to CVE-2020-0177?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0177?


Explain the CVE ID: What does the identifier CVE-2020-0178 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0178.

In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This could lead to local information disclosure of config flags with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143299398


Provide references for further information: Can you share references or external links related to CVE-2020-0178?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0178?


Explain the CVE ID: What does the identifier CVE-2020-0179 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0179.

In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is required for exploitation.Product: AndroidVersions: Android-10Android ID: A-130656917


Provide references for further information: Can you share references or external links related to CVE-2020-0179?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0179?


Explain the CVE ID: What does the identifier CVE-2020-0180 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0180.

In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142861738


Provide references for further information: Can you share references or external links related to CVE-2020-0180?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0180?


Explain the CVE ID: What does the identifier CVE-2020-0181 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0181.

In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145075076


Provide references for further information: Can you share references or external links related to CVE-2020-0181?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}, {'name': 'FEDORA-2020-e99ef3282f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVBD5JRUQPN4LQHTAAJHA3MR5M7YTAC7/'}, {'name': 'GLSA-202011-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202011-19'}, {'name': 'FEDORA-2020-0aa0fc1b0c', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELDZR6USD5PR34MRK2ZISLCYJ465FNKN/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0181?


Explain the CVE ID: What does the identifier CVE-2020-0182 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0182.

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147140917


Provide references for further information: Can you share references or external links related to CVE-2020-0182?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2020-06-01'}, {'name': '[debian-lts-announce] 20200613 [SECURITY] [DLA 2249-1] libexif security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/06/msg00020.html'}, {'name': 'USN-4396-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4396-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0182?


Explain the CVE ID: What does the identifier CVE-2020-0183 mean in the context of cybersecurity?