Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2020-0081 | 7.2 |
In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andr
|
03-05-2022 - 14:21 | 17-04-2020 - 19:15 | |
CVE-2019-2056 | 4.9 |
There is a possible disclosure of RAM using a shared crypto key due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: An
|
21-07-2021 - 11:39 | 17-04-2020 - 19:15 | |
CVE-2020-0080 | 9.3 |
In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying. This could lead to local escalation of privilege with User exec
|
21-07-2021 - 11:39 | 17-04-2020 - 19:15 | |
CVE-2020-0082 | 7.2 |
In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server with no additional execution privileges needed. Use
|
24-04-2020 - 19:46 | 17-04-2020 - 19:15 | |
CVE-2020-0079 | 4.6 |
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product
|
23-04-2020 - 18:56 | 17-04-2020 - 19:15 | |
CVE-2020-0078 | 4.6 |
In releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploit
|
23-04-2020 - 18:54 | 17-04-2020 - 19:15 | |
CVE-2020-0077 | 2.1 |
In authorize_enroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for explo
|
23-04-2020 - 15:21 | 17-04-2020 - 19:15 | |
CVE-2020-0072 | 10.0 |
In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed
|
22-04-2020 - 20:25 | 17-04-2020 - 19:15 | |
CVE-2020-0073 | 10.0 |
In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed
|
22-04-2020 - 20:13 | 17-04-2020 - 19:15 | |
CVE-2020-0075 | 2.1 |
In set_shared_key of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit
|
22-04-2020 - 19:36 | 17-04-2020 - 19:15 | |
CVE-2020-0076 | 4.6 |
In get_auth_result of the FPC IRIS TrustZone app, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl
|
22-04-2020 - 19:31 | 17-04-2020 - 19:15 | |
CVE-2020-0071 | 10.0 |
In rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not n
|
21-04-2020 - 18:01 | 17-04-2020 - 19:15 | |
CVE-2020-0070 | 10.0 |
In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not neede
|
21-04-2020 - 17:59 | 17-04-2020 - 19:15 |