SB2020071015 - Multiple vulnerabilities in Google Android

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020071015

SB2020071015 - Multiple vulnerabilities in Google Android

Published: July 10, 2020

Security Bulletin ID SB2020071015
Severity
High
Patch available
YES
Number of vulnerabilities 16
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 44% Medium 31% Low 25%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 16 secuirty vulnerabilities.


1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-0122)

The vulnerability allows a local attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions within the Framework functionality. A local attacker can use a malicious application and gain elevated privileges on the target system.


2) Use-after-free (CVE-ID: CVE-2020-3701)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in Camera Driver. A remote attacker can gain elevated privileges on the target system.


3) Out-of-bounds read (CVE-ID: CVE-2020-3688)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in Video while parsing mp4 clip with corrupted sample atoms. A remote attacker can trigger out-of-bounds read error and read contents of memory on the system.


4) Out-of-bounds read (CVE-ID: CVE-2020-3700)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in WIN WLAN Host. A remote attacker can trigger out-of-bounds read error and read contents of memory on the system.


5) Use-after-free (CVE-ID: CVE-2019-10580)

The vulnerability allows a local attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in HLOS. A local attacker can gain elevated privileges on the target system.


6) Buffer overflow (CVE-ID: CVE-2020-3699)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in WLAN HOST. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


7) Out-of-bounds write (CVE-ID: CVE-2020-3698)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in WLAN Host. A remote attacker can trigger out-of-bounds write and execute arbitrary code on the target system.


8) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-0227)

The vulnerability allows a local attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions within the Framework functionality. A local attacker can use a malicious application and gain elevated privileges on the target system.


9) Privilege escalation (CVE-ID: CVE-2018-20669)

The vulnerability allows a local attacker to escalate privileges on the system.

The vulnerability exists in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c due to a provided address with access_ok() is not checked before accessing userspace data in certain situations. A local attacker can gain elevated privileges.


10) Out-of-bounds write (CVE-ID: CVE-2019-9502)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in "wlc_wpa_plumb_gtk". A remote attacker on the local network can send specially crafted WiFi packets, trigger out-of-bounds write and execute arbitrary code on the target system.


11) Out-of-bounds write (CVE-ID: CVE-2019-9501)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in "wlc_wpa_sup_eapol". A remote attacker on the local network can send specially crafted WiFi packets, trigger out-of-bounds write and execute arbitrary code on the target system.


12) Out-of-bounds read (CVE-ID: CVE-2020-0107)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the System functionality. A remote attacker can create a specially crafted file, trigger out-of-bounds read error and read contents of memory on the system.


13) Buffer overflow (CVE-ID: CVE-2020-0225)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the System functionality A remote attacker can use a specially crafted file, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


14) Buffer overflow (CVE-ID: CVE-2020-0224)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the System functionality. A remote attacker can use a specially crafted file, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


15) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-0226)

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions within the Media Framework functionality. A remote attacker can use a specially crafted file to gain elevated privileges on the target system.


16) Heap-based buffer overflow (CVE-ID: CVE-2020-9589)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can pass specially crafted file to the application, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install update from vendor's website.

References