Google Android vulnerabilities

CVE-2020-0098 [HIGH] CVE-2020-0098: In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-144285917

CVE-2020-0262 [HIGH] CVE-2020-0262: In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. Th In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156353008

CVE-2020-0094 [HIGH] CWE-787 CVE-2020-0094: In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-148223871

CVE-2020-0273 [HIGH] CWE-787 CVE-2020-0273: In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This cou In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155646800

CVE-2020-0166 [HIGH] CWE-20 CVE-2020-0166: In multiple functions of URI.java, there is a possible escalation of privilege due to missing valida In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI information. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124526860

CVE-2020-0129 [HIGH] CWE-787 CVE-2020-0129: In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bound In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123292010

CVE-2020-0102 [HIGH] CWE-787 CVE-2020-0102: In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an inc In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143231677

CVE-2020-0084 [HIGH] CWE-862 CVE-2020-0084: In several functions of NotificationManagerService.java, there are missing permission checks. This c In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143339775

CVE-2024-0043 [HIGH] CWE-863 CVE-2024-0043: In multiple locations, there is a possible notification listener grant to an app running in the work In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2022-20045 [HIGH] CWE-416 CVE-2022-20045: In Bluetooth, there is a possible service crash due to a use after free. This could lead to local es In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS06126820.

CVE-2022-20044 [HIGH] CWE-416 CVE-2022-20044: In Bluetooth, there is a possible service crash due to a use after free. This could lead to local es In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue ID: ALPS06126814.

CVE-2020-0299 [HIGH] CWE-862 CVE-2020-0299: In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145130119

CVE-2020-0085 [HIGH] CWE-862 CVE-2020-0085: In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege to activate tethering with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-134487438

CVE-2019-9378 [HIGH] CWE-732 CVE-2019-9378: In the Activity Manager service, there is a possible permission bypass due to incorrect permission c In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-124539196

CVE-2020-0054 [HIGH] CWE-862 CVE-2020-0054: In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permissi In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146642727

CVE-2023-20915 [HIGH] CWE-670 CVE-2023-20915: In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a phone In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a phone account without user interaction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 And

CVE-2020-27044 [HIGH] CWE-416 CVE-2020-27044: In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This c In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157066561

CVE-2020-0208 [HIGH] CWE-276 CVE-2020-0208: In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lea In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145207098

CVE-2022-39852 [HIGH] CWE-122 CVE-2022-39852: A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to S A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execution.

CVE-2020-27054 [HIGH] CWE-862 CVE-2020-27054: In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could l In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-159061926