Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-0206 | In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of… | Medium (5.5) | 2020-06-11 | Environment Specific |
| CVE-2020-0205 | In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds… | Medium (6.5) | 2020-06-11 | Environment Specific |
| CVE-2020-0204 | In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use co… | High (7.0) | 2020-06-11 | Environment Specific |
| CVE-2020-0203 | In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to… | High (7.8) | 2020-06-11 | Environment Specific |
| CVE-2020-0202 | In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing sys… | High (7.8) | 2020-06-11 | Environment Specific |