Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-0004 | In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture… | Medium (5.5) | 2020-01-08 | Environment Specific |
| CVE-2020-0003 | In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vuln… | Medium (6.7) | 2020-01-08 | Environment Specific |
| CVE-2020-0002 | In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lea… | High (8.8) | 2020-01-08 | Environment Specific |
| CVE-2020-0001 | In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to lo… | High (7.8) | 2020-01-08 | Environment Specific |
| CVE-2016-6585 | A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let … | Medium (5.3) | 2020-01-08 | Environment Specific |