Google Android vulnerabilities

CVE-2020-0343 [MEDIUM] CWE-862 CVE-2020-0343: In NetworkStatsService, there is a possible access to protected data due to a missing permission che In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119672472

CVE-2020-0048 [MEDIUM] CWE-908 CVE-2020-0048: In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139417189

CVE-2019-9435 [MEDIUM] CWE-125 CVE-2019-9435: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80146682

CVE-2019-9249 [MEDIUM] CWE-125 CVE-2019-9249: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120255805

CVE-2019-9368 [MEDIUM] CWE-125 CVE-2019-9368: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79883568

CVE-2019-9312 [MEDIUM] CWE-125 CVE-2019-9312: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-78288018

CVE-2019-9347 [MEDIUM] CWE-125 CVE-2019-9347: In the m4v_h263 codec, there is a possible out of bounds read due to a use after free. This could le In the m4v_h263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109891727

CVE-2019-9417 [MEDIUM] CWE-125 CVE-2019-9417: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111450079

CVE-2019-9289 [MEDIUM] CWE-125 CVE-2019-9289: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79883824

CVE-2019-9427 [MEDIUM] CWE-416 CVE-2019-9427: In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110166350

CVE-2019-9287 [MEDIUM] CWE-125 CVE-2019-9287: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-78287084

CVE-2019-2124 [MEDIUM] CVE-2019-2124: In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8 In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure.

CVE-2021-25393 [MEDIUM] CWE-94 CVE-2021-25393: Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data.

CVE-2020-0284 [MEDIUM] CWE-862 CVE-2020-0284: In Telephony, there is a possible permission bypass due to a missing permission check. This could le In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253784

CVE-2020-0285 [MEDIUM] CWE-862 CVE-2020-0285: In Telephony, there is a possible permission bypass due to a missing permission check. This could le In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253479

CVE-2020-27097 [MEDIUM] CVE-2020-27097: In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140729426

CVE-2020-27025 [MEDIUM] CVE-2020-27025: In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due t In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156008365

CVE-2020-0289 [MEDIUM] CWE-862 CVE-2020-0289: In PackageManager, there is a missing permission check. This could lead to local information disclos In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996872

CVE-2020-0288 [MEDIUM] CWE-862 CVE-2020-0288: In PackageManager, there is a missing permission check. This could lead to local information disclos In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153995991

CVE-2020-27041 [MEDIUM] CVE-2020-27041: In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This could lead to local information disclosure of notification data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154928507