DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Google Android: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2020-08-03
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, beliebigen Programmcode mit Administratorrechte auszuführen, einen Denial of Service Zustand zu verursachen oder Informationen offenzulegen.
01
beschreibt (57)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-3675US | critical9.8 | — | ||
u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… | ||||
| CVE-2020-3669US | critical9.8 | — | ||
u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… | ||||
| CVE-2020-3668US | critical9.8 | — | ||
u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… | ||||
| CVE-2020-3667US | critical9.8 | — | ||
u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit… | ||||
| CVE-2020-3666US | high7.8 | — | ||
u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Con… | ||||
| CVE-2020-3647US | high7.8 | — | ||
u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voic… | ||||
| CVE-2020-3646US | high7.8 | — | ||
u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr… | ||||
| CVE-2020-3644US | medium5.5 | — | ||
u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon C… | ||||
| CVE-2020-3643US | medium5.5 | — | ||
u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… | ||||
| CVE-2020-3640US | high7.8 | — | ||
u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLOS adversary calls the function with wron… | ||||
| CVE-2020-3636US | high7.8 | — | ||
u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… | ||||
| CVE-2020-3624US | high7.8 | — | ||
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdra… | ||||
| CVE-2020-3619US | high7.0 | — | ||
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, S… | ||||
| CVE-2020-3611US | high7.8 | — | ||
u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… | ||||
| CVE-2020-11128US | high7.8 | — | ||
u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… | ||||
| CVE-2020-11122US | medium5.5 | — | ||
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobil… | ||||
| CVE-2020-11120US | high7.8 | — | ||
u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use… | ||||
| CVE-2020-11118US | high7.5 | — | ||
u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectiv… | ||||
| CVE-2020-11116US | critical9.8 | — | ||
u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consume… | ||||
| CVE-2020-11115US | high7.5 | — | ||
u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… | ||||
20 von 57 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- BlackBerry Powered by Android Security Bulletin - September 2020external
- Red Hat Security Advisory RHSA-2022:7700 vom 2022-11-08external
- Red Hat Security Advisory RHSA-2024:3486 vom 2024-05-30external
- Debian Security Advisory DLA-2549 vom 2021-02-08external
- Android Patchday August vom 2020-08-03external
- Pixel Patchday August vom 2020-08-03external
- WID-SEC-W-2022-1995 - CSAF Versionself
- WID-SEC-2022-1995 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan