cve.bz

google android vulnerabilities, newest first, page 65

Filter
  1. 7.8CVE-2022-39882EPSS 0.1%

    Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker to execute arbitrary code.

  2. 7.8CVE-2022-39880EPSS 0.1%

    Improper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1 allows local attacker to perform an arbitrary code execution.

  3. 3.3CVE-2022-39879EPSS 0.08%

    Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessing information with phone uid.

  4. 4.6CVE-2022-20465EPSS 0.8%

    In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution pr…

  5. 7.8CVE-2022-20462EPSS 0.1%

    In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no…

  6. 5.5CVE-2022-20457EPSS 0.1%

    In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed…

  7. 6.7CVE-2022-20454EPSS 0.1%

    In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product…

  8. 5.5CVE-2022-20453EPSS 0.2%

    In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User inte…

  9. 7.8CVE-2022-20452EPSS 0.4%

    In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti…

  10. 7.8CVE-2022-20451EPSS 0.1%

    In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction …

  11. 7.8CVE-2022-20450EPSS 0.09%

    In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges need…

  12. 5.5CVE-2022-20448EPSS 0.1%

    In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. Use…

  13. 6.5CVE-2022-20447EPSS 0.3%

    In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed f…

  14. 3.3CVE-2022-20446EPSS 0.1%

    In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the background due to a missing permission check. This could lead to local escalation of privilege with no additional executi…

  15. 7.5CVE-2022-20445EPSS 0.5%

    In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i…

  16. 7.8CVE-2022-20441EPSS 0.1%

    In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the code. This could lead to local escalation of privilege if the targeted app has an intent trampoline, with no additiona…

  17. 5.5CVE-2022-20426EPSS 0.09%

    In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. Use…

  18. 5.5CVE-2022-20414EPSS 0.1%

    In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is n…

  19. 7.8CVE-2021-39661EPSS 0.1%

    In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User…

  20. 7.8CVE-2021-1050EPSS 0.2%

    In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…

  21. 6.8CVE-2022-32618EPSS 0.2%

    In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privile…

  22. 6.8CVE-2022-32617EPSS 0.2%

    In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privile…

  23. 6.7CVE-2022-32616EPSS 0.1%

    In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341258; I…

  24. 6.7CVE-2022-32615EPSS 0.1%

    In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326559; I…

  25. 6.7CVE-2022-32614EPSS 0.1%

    In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310571; Issue …

  26. 6.4CVE-2022-32613EPSS 0.1%

    In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07206340; Issue…

  27. 6.4CVE-2022-32612EPSS 0.1%

    In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203500; Issue ID…

  28. 6.7CVE-2022-32611EPSS 0.1%

    In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0734037…

  29. 6.4CVE-2022-32610EPSS 0.1%

    In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203476; Issue ID…

  30. 6.4CVE-2022-32609EPSS 0.1%

    In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203410; Issue ID…

  31. 6.4CVE-2022-32608EPSS 0.1%

    In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388753; Issue I…

  32. 6.7CVE-2022-32607EPSS 0.1%

    In aee, there is a possible use after free due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07202891; Is…

  33. 6.7CVE-2022-32605EPSS 0.1%

    In isp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0721…

  34. 6.7CVE-2022-32603EPSS 0.1%

    In gpu drm, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS…

  35. 5.5CVE-2022-32602EPSS 0.1%

    In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  36. 7.8CVE-2022-32601EPSS 0.1%

    In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID…

  37. 6.7CVE-2022-21778EPSS 0.1%

    In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0…

  38. 5.5CVE-2022-39128EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  39. 5.5CVE-2022-39127EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  40. 5.5CVE-2022-39126EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  41. 5.5CVE-2022-39125EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  42. 5.5CVE-2022-39124EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  43. 5.5CVE-2022-39123EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  44. 5.5CVE-2022-39122EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  45. 5.5CVE-2022-39121EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  46. 5.5CVE-2022-39120EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  47. 5.5CVE-2022-39117EPSS 0.2%

    In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  48. 5.5CVE-2022-39115EPSS 0.1%

    In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.

  49. 5.5CVE-2022-39114EPSS 0.1%

    In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.

  50. 5.5CVE-2022-39113EPSS 0.1%

    In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.