Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-0395 | In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe Pendin… | Medium (5.5) | 2020-09-17 | Environment Specific |
| CVE-2020-0394 | In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. Thi… | High (7.8) | 2020-09-17 | Environment Specific |
| CVE-2020-0393 | In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. T… | Medium (5.5) | 2020-09-17 | Environment Specific |
| CVE-2020-0392 | In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to… | High (7.8) | 2020-09-17 | Environment Specific |
| CVE-2020-0391 | In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenfor… | High (7.8) | 2020-09-17 | Environment Specific |