Menu

Star on GitHub · 3.2k

2020

18,349 vulnerabilities published in 2020.

Results

7,554 of 18,349· Page 42/152
6.5
CVE-2020-0364

In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatio

6.5
CVE-2020-0363

In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial

6.5
CVE-2020-0362

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote d

6.5
CVE-2020-0361

In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote informatio

5.5
CVE-2020-0359

In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local informati

6.4
CVE-2020-0358

In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of pr

6.7
CVE-2020-0356

In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esc

6.5
CVE-2020-0355

In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inf

6.5
CVE-2020-0353

In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote den

5.5
CVE-2020-0352

In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disc

6.5
CVE-2020-0351

In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial o

5.5
CVE-2020-0344

In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disc

5.5
CVE-2020-0343

In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead

6.5
CVE-2020-0340

In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remot

5.0
CVE-2020-0338

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local informa

5.5
CVE-2020-0337

In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local i

6.7
CVE-2020-0336

In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of pri

6.5
CVE-2020-0332

In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of servi

6.7
CVE-2020-0330

In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privileg

5.5
CVE-2020-0329

In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local inf

4.4
CVE-2020-0328

In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information d

6.5
CVE-2020-0324

In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati

5.5
CVE-2020-0323

In libavb, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di

4.4
CVE-2020-0322

In apexd, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis

6.5
CVE-2020-0320

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote d

5.5
CVE-2020-0317

In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to

5.5
CVE-2020-0314

In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configura

5.5
CVE-2020-0312

In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informa

5.5
CVE-2020-0308

In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local inform

6.5
CVE-2020-0301

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote d

5.5
CVE-2020-0297

In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local

5.5
CVE-2020-0296

In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to l

5.5
CVE-2020-0293

In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could

5.5
CVE-2020-0290

In PackageManager, there is a missing permission check. This could lead to local information disclosure across users wit

5.5
CVE-2020-0289

In PackageManager, there is a missing permission check. This could lead to local information disclosure across users wit

5.5
CVE-2020-0288

In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boun

6.5
CVE-2020-0287

In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote den

6.5
CVE-2020-0279

In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor

5.5
CVE-2020-0274

In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local in

6.5
CVE-2020-0270

In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information

5.5
CVE-2020-0125

In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

6.1
CVE-2020-13260

A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated

6.7
CVE-2020-0431

In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to

6.7
CVE-2020-0429

In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free

6.4
CVE-2020-0428

In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privile

5.5
CVE-2020-0427

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local in

6.7
CVE-2020-0403

In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This c

6.1
CVE-2020-25729

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.

4.7
CVE-2019-20919

An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL

6.5
CVE-2020-11700

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.

Test your stack for 2020issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.