Shaik Usaf

2 exploits Active since Jun 2020
CVE-2020-0137 NOMISEC HIGH WORKING POC
Android 10 - Missing Authorization in NetworkManagementService
In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141920289
CVSS 7.8
CVE-2020-0452 NOMISEC CRITICAL WORKING POC
Android 8.0-11 - Integer Overflow to Remote Code Execution in EXIF Entry Processing
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731
CVSS 9.8