CVE-2020-0214
published 2020-06-11CVE-2020-0214: In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.80%
53.1th percentile
In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140292264
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2020-6380 chromium-browser: extension message verification error
bugzilla·2020-01-21·CVSS 8.8
CVE-2020-6380 [HIGH] CVE-2020-6380 chromium-browser: extension message verification error
CVE-2020-6380 chromium-browser: extension message verification error
An extension message verification error flaw was found in the extension component of the Chromium browser.
References:
https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop_16.html
https://bugs.chromium.org/p/chromium/issues/detail?id=1032170
Discussion:
Created chromium tracking bugs for this issue:
Affects: epel-all [bug 1793539]
Affects: fedora-all [bug 1793540]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2020:0214 https://access.redhat.com/errata/RHSA-2020:0214
---
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):
https://access.redhat.com/security/cve/cve-2020-63
Bugzilla
CVE-2020-6379 chromium-browser: use-after-free in speech recognizer
bugzilla·2020-01-21·CVSS 8.8
CVE-2020-6379 [HIGH] CVE-2020-6379 chromium-browser: use-after-free in speech recognizer
CVE-2020-6379 chromium-browser: use-after-free in speech recognizer
An use-after-free flaw was found in the in speech recognizer component of the Chromium browser.
References:
https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop_16.html
https://bugs.chromium.org/p/chromium/issues/detail?id=1033407
Discussion:
Created chromium tracking bugs for this issue:
Affects: epel-all [bug 1793530]
Affects: fedora-all [bug 1793531]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2020:0214 https://access.redhat.com/errata/RHSA-2020:0214
---
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):
https://access.redhat.com/security/cve/cve-2020-6379
Bugzilla
CVE-2020-6378 chromium-browser: use-after-free in speech recognizer
bugzilla·2020-01-21·CVSS 8.8
CVE-2020-6378 [HIGH] CVE-2020-6378 chromium-browser: use-after-free in speech recognizer
CVE-2020-6378 chromium-browser: use-after-free in speech recognizer
An use-after-free flaw was found in the in speech recognizer component of the Chromium browser.
References:
https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop_16.html
https://bugs.chromium.org/p/chromium/issues/detail?id=1018677
Discussion:
Created chromium tracking bugs for this issue:
Affects: epel-all [bug 1793515]
Affects: fedora-all [bug 1793517]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2020:0214 https://access.redhat.com/errata/RHSA-2020:0214
---
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):
https://access.redhat.com/security/cve/cve-2020-6378
2020-06-11
Published