CVE-2020-27048
- EPSS 0.06%
- Veröffentlicht 15.12.2020 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:20:43
In RW_SendRawFrame of rw_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Prod...
CVE-2020-27049
- EPSS 0.06%
- Veröffentlicht 15.12.2020 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:20:43
In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2020-27050
- EPSS 0.1%
- Veröffentlicht 15.12.2020 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:20:43
In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
CVE-2020-27051
- EPSS 0.06%
- Veröffentlicht 15.12.2020 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:20:43
In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for expl...
CVE-2020-27052
- EPSS 0.01%
- Veröffentlicht 15.12.2020 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:20:44
In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interac...
CVE-2020-27053
- EPSS 0.02%
- Veröffentlicht 15.12.2020 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:20:44
In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi network name with System execution privileges need...
CVE-2020-27054
- EPSS 0.01%
- Veröffentlicht 15.12.2020 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:20:44
In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidV...
CVE-2020-27055
- EPSS 0.23%
- Veröffentlicht 15.12.2020 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:20:44
In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi configuration due to improper input validation. This could lead to remote information disclosure with...
CVE-2020-27036
- EPSS 0.02%
- Veröffentlicht 15.12.2020 17:15:12
- Zuletzt bearbeitet 21.11.2024 05:20:42
In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is ...
CVE-2020-27037
- EPSS 0.02%
- Veröffentlicht 15.12.2020 17:15:12
- Zuletzt bearbeitet 21.11.2024 05:20:42
In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is no...