2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-0055MEDIUM5.5In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds ch...
CVE-2020-0054HIGH7.8In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to...
CVE-2020-0053MEDIUM6.7In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_u...
CVE-2020-0052MEDIUM4.3In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. T...
CVE-2020-0051HIGH7.8In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of p...
CVE-2020-0050MEDIUM6.7In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. This...
CVE-2020-0049MEDIUM6.5In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This cou...
CVE-2020-0048MEDIUM5.5In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lea...
CVE-2020-0047LOW3.3In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio ...
CVE-2020-0046HIGH7.8In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow...
CVE-2020-0045MEDIUM6.4In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could le...
CVE-2020-9044CRITICAL9.1XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks...
CVE-2020-7579MEDIUM6.1A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-S...
CVE-2020-0083HIGH7.5In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic e...
CVE-2020-0069HIGH7.8In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient ...
CVE-2020-0061MEDIUM5.5In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to lo...
CVE-2020-0060MEDIUM4.4In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This c...
CVE-2020-0059MEDIUM5.5In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a...
CVE-2020-0058MEDIUM4.4In l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an incorrect bounds check. This could ...
CVE-2020-0044MEDIUM4.4In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead ...
CVE-2020-0043MEDIUM4.4In authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing bounds check. This could...
CVE-2020-0042MEDIUM4.4In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due to a missing bounds ch...
CVE-2020-0041HIGH7.8In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could ...
CVE-2020-0039HIGH7.5In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. Thi...
CVE-2020-0038HIGH7.5In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. Thi...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now