Google Android vulnerabilities

CVE-2020-27028 [MEDIUM] CWE-125 CVE-2020-27028: In filter_incoming_event of hci_layer.cc, there is a possible out of bounds read due to a missing bo In filter_incoming_event of hci_layer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141618611

CVE-2020-0152 [MEDIUM] CWE-125 CVE-2020-0152: In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a mi In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145992159

CVE-2020-0144 [MEDIUM] CWE-125 CVE-2020-0144: In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142543497

CVE-2020-0149 [MEDIUM] CWE-125 CVE-2020-0149: In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544089

CVE-2020-27021 [MEDIUM] CWE-125 CVE-2020-27021: In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a mis In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168712245

CVE-2020-27033 [MEDIUM] CWE-125 CVE-2020-27033: In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153655153

CVE-2020-27031 [MEDIUM] CWE-125 CVE-2020-27031: In nfc_data_event of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds che In nfc_data_event of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151313205

CVE-2020-0325 [MEDIUM] CWE-20 CVE-2020-0325: In NFC, there is a missing bounds check. This could lead to local information disclosure with System In NFC, there is a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145079309

CVE-2020-0328 [MEDIUM] CWE-125 CVE-2020-0328: In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150156131

CVE-2020-0158 [MEDIUM] CWE-125 CVE-2020-0158: In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a mis In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141547128

CVE-2020-0143 [MEDIUM] CWE-125 CVE-2020-0143: In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a m In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of heap data via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-

CVE-2020-0148 [MEDIUM] CWE-125 CVE-2020-0148: In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_ In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploit

CVE-2020-0147 [MEDIUM] CWE-125 CVE-2020-0147: In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142638392

CVE-2020-0145 [MEDIUM] CWE-125 CVE-2020-0145: In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing b In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544079

CVE-2020-0146 [MEDIUM] CWE-125 CVE-2020-0146: In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missi In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142546561

CVE-2020-0154 [MEDIUM] CWE-125 CVE-2020-0154: In nci_proc_core_rsp of nci_hrcv.cc, there is a possible out of bounds read due to an incorrect boun In nci_proc_core_rsp of nci_hrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141550919

CVE-2020-0139 [MEDIUM] CWE-125 CVE-2020-0139: In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overfl In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. System execution privileges are needed and user interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-14552047

CVE-2020-0151 [MEDIUM] CWE-125 CVE-2020-0151: In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a mis In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-133164384

CVE-2021-0404 [MEDIUM] CWE-20 CVE-2021-0404: In mobile_log_d, there is a possible information disclosure due to improper input validation. This c In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039.

CVE-2022-20098 [MEDIUM] CWE-862 CVE-2022-20098: In aee daemon, there is a possible information disclosure due to a missing permission check. This co In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06419017.