2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-0356MEDIUM6.7In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esc...
CVE-2020-0355MEDIUM6.5In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inf...
CVE-2020-0353MEDIUM6.5In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote den...
CVE-2020-0352MEDIUM5.5In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disc...
CVE-2020-0351MEDIUM6.5In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial o...
CVE-2020-0346HIGH7.8In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation ...
CVE-2020-0345HIGH7.8In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of p...
CVE-2020-0344MEDIUM5.5In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disc...
CVE-2020-0343MEDIUM5.5In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead ...
CVE-2020-0341HIGH7.8In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local esc...
CVE-2020-0340MEDIUM6.5In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remot...
CVE-2020-0338MEDIUM5In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local informa...
CVE-2020-0337MEDIUM5.5In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local i...
CVE-2020-0336MEDIUM6.7In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of pri...
CVE-2020-0333CRITICAL9.8In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no ad...
CVE-2020-0332MEDIUM6.5In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of servi...
CVE-2020-0330MEDIUM6.7In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privileg...
CVE-2020-0329MEDIUM5.5In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local inf...
CVE-2020-0328MEDIUM4.4In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information d...
CVE-2020-0324MEDIUM6.5In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati...
CVE-2020-0323MEDIUM5.5In libavb, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di...
CVE-2020-0322MEDIUM4.4In apexd, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis...
CVE-2020-0321HIGH8.8In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code ...
CVE-2020-0320MEDIUM6.5In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote d...
CVE-2020-0317MEDIUM5.5In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now