CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2020-15580
https://notcve.org/view.php?id=CVE-2020-15580
07 Jul 2020 — An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) by enrolling a new lock password. The Samsung ID is SVE-2020-17328 (July 2020). Se detectó un problema en dispositivos móviles Samsung con versiones de software O(8.x), P(9.0) y Q(10.0). Los atacantes pueden omitir el Factory Reset Protection (FRP) al inscribir una nueva contraseña de bloqueo. • https://security.samsungmobile.com/securityUpdate.smsb •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2020-15581
https://notcve.org/view.php?id=CVE-2020-15581
07 Jul 2020 — An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The kernel logging feature allows attackers to discover virtual addresses via vectors involving shared memory. The Samsung ID is SVE-2020-17605 (July 2020). Se detectó un problema en dispositivos móviles Samsung con versiones de software O(8.x), P(9.0) y Q(10.0). La funcionalidad de registro del kernel permite a atacantes detectar direcciones virtuales por medio de vectores que involucran memoria compartida. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2020-15583
https://notcve.org/view.php?id=CVE-2020-15583
07 Jul 2020 — An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 (July 2020). Se detectó un problema en dispositivos móviles Samsung con versiones de software O(8.x), P(9.0) y Q(10.0). StickerProvider permite un salto de directorio para acceder a los archivos del sistema. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 1CVE-2020-0215
https://notcve.org/view.php?id=CVE-2020-0215
11 Jun 2020 — In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypass. This could lead to local escalation of privilege that exposes a pairing Bluetooth MAC address with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1 Android ID: A-140417248 En la función onCreate del archivo ConfirmConnectActivity.java, se presenta una posible filtrac... • https://github.com/Trinadh465/packages_apps_Nfc_AOSP10_r33_CVE-2020-0215 • CWE-276: Incorrect Default Permissions •
CVSS: 7.5EPSS: 9%CPEs: 11EXPL: 1CVE-2020-0198 – libexif: integer overflow in exif_data_load_data_content function in exif-data.c
https://notcve.org/view.php?id=CVE-2020-0198
11 Jun 2020 — In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941 En la función exif_data_load_data_content del archivo exif-data.c, se presenta un posible aborto de UBSAN debido a un desbordamiento de enteros. Esto podría conllevar a una denegación de servicio remota sin se... • https://github.com/Trinadh465/external_libexif_AOSP10_r33_CVE-2020-0198 • CWE-125: Out-of-bounds Read CWE-190: Integer Overflow or Wraparound •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-0182 – libexif: out of bounds read due to a missing bounds check in exif_entry_get_value function in exif-entry.c
https://notcve.org/view.php?id=CVE-2020-0182
11 Jun 2020 — In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147140917 En la función la función exif_entry_get_value del archivo exif-entry.c, se presenta una posible lectura fuera de límites debido a una falta de comprobación de límites. Esto podría conllevar a una d... • https://lists.debian.org/debian-lts-announce/2020/06/msg00020.html • CWE-125: Out-of-bounds Read •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2020-0117
https://notcve.org/view.php?id=CVE-2020-0117
10 Jun 2020 — In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194 En la función aes_cmac del archivo aes_cmac.cc, se presenta una posible escritura fuera de límites debido a un desbordamiento de enteros. Esto podría conllevar a... • https://source.android.com/security/bulletin/2020-06-01 • CWE-190: Integer Overflow or Wraparound CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2020-0115
https://notcve.org/view.php?id=CVE-2020-0115
10 Jun 2020 — In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150038428 En la función verificadoIntentFiltersIfNeeded del archivo PackageManagerService.java, se presenta una posible omisi... • https://source.android.com/security/bulletin/2020-06-01 • CWE-863: Incorrect Authorization •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-13843
https://notcve.org/view.php?id=CVE-2020-13843
04 Jun 2020 — An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 (June 2020). Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android antes del 01-06-2020. Los usuarios locales pueden causar una denegación de servicio porque la comprobación de la partición de los datos de usuario se maneja inapropiadamente. • https://lgsecurity.lge.com •
CVSS: 7.8EPSS: 0%CPEs: 39EXPL: 0CVE-2020-13842
https://notcve.org/view.php?id=CVE-2020-13842
04 Jun 2020 — An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT command was made available even though it is unused. The LG ID is LVE-SMP-200010 (June 2020). Se detectó un problema en los dispositivos móviles LG con Sistema Operativo Android versiones 7.2, 8.0, 8.1, 9 y 10 (chipsets MTK). Se puso a disposición un comando AT peligroso aunque no se haya usado. • https://lgsecurity.lge.com •