cve.bz

google android vulnerabilities, newest first, page 67

Filter
  1. 5.5CVE-2022-20413EPSS 0.3%

    In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed fo…

  2. 6.7CVE-2022-20412EPSS 0.1%

    In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Pr…

  3. 7.5CVE-2022-20410EPSS 0.8%

    In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not ne…

  4. 6.7CVE-2022-20409EPSS 0.6%

    In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.…

  5. 5.0CVE-2022-20394EPSS 0.1%

    In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when another app is showing an IME due to a missing permission check. This could lead to local information disclosure with no addi…

  6. 5.5CVE-2022-20351EPSS 0.1%

    In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not nee…

  7. 7.8CVE-2021-0951EPSS 0.1%

    In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex…

  8. 7.0CVE-2021-0696EPSS 0.08%

    In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.…

  9. 6.7CVE-2022-32593EPSS 0.1%

    In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS071384…

  10. 6.7CVE-2022-32592EPSS 0.1%

    In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07…

  11. 7.5CVE-2022-32591EPSS 0.8%

    In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07257259;…

  12. 6.7CVE-2022-32590EPSS 0.1%

    In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07299425…

  13. 7.5CVE-2022-32589EPSS 0.8%

    In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. …

  14. 6.7CVE-2022-26475EPSS 0.1%

    In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS073107…

  15. 6.7CVE-2022-26474EPSS 0.1%

    In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation…

  16. 6.7CVE-2022-26473EPSS 0.1%

    In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Iss…

  17. 7.8CVE-2022-26472EPSS 0.2%

    In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID…

  18. 7.8CVE-2022-26471EPSS 0.1%

    In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Pa…

  19. 6.7CVE-2022-26452EPSS 0.08%

    In isp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262305; Issue ID…

  20. 3.3CVE-2022-39856EPSS 0.1%

    Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers to access call information.

  21. 4.3CVE-2022-39855EPSS 0.1%

    Improper access control vulnerability in FACM application prior to SMR Oct-2022 Release 1 allows a local attacker to connect arbitrary AP and Bluetooth devices.

  22. 7.8CVE-2022-39854EPSS 0.1%

    Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory.

  23. 7.8CVE-2022-39853EPSS 0.1%

    A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault.

  24. 7.8CVE-2022-39852EPSS 0.2%

    A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execution.

  25. 3.3CVE-2022-39851EPSS 0.1%

    Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BIND_REMOTEVIEWS permission.

  26. 3.3CVE-2022-39850EPSS 0.1%

    Improper access control in mum_container_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data.

  27. 3.3CVE-2022-39849EPSS 0.1%

    Improper access control in knox_vpn_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data.

  28. 3.3CVE-2022-39848EPSS 0.1%

    Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log.

  29. 5.3CVE-2022-39847EPSS 0.08%

    Use after free vulnerability in set_nft_pid and signal_handler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform malicious actions.

  30. 3.3CVE-2022-36868EPSS 0.1%

    Improper restriction of broadcasting Intent in MouseNKeyHidDevice prior to SMR Oct-2022 Release 1 leaks MAC address of the connected Bluetooth device.

  31. 7.8CVE-2022-20364EPSS 0.1%

    In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation…

  32. 6.7CVE-2022-20231EPSS 0.1%

    In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ex…

  33. 5.5CVE-2022-20399EPSS 0.10%

    In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value. This could lead to local information disclosure of network data with no additional execution privileges needed. …

  34. 7.8CVE-2022-20398EPSS 0.10%

    In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interactio…

  35. 5.5CVE-2022-20396EPSS 0.08%

    In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or user interaction, due to a permissions bypass. This could lead to local escalation of privilege with no additional execut…

  36. 7.8CVE-2022-20395EPSS 0.1%

    In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl…

  37. 5.5CVE-2022-20393EPSS 0.1%

    In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure from the media server with no additional execution privileges need…

  38. 7.8CVE-2022-20392EPSS 0.1%

    In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission without user consent due to improper input validation. This could lead to local escalation of privilege during app instal…

  39. 9.8CVE-2022-20391EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000

  40. 9.8CVE-2022-20390EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002

  41. 9.8CVE-2022-20389EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004

  42. 9.8CVE-2022-20388EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323

  43. 9.8CVE-2022-20387EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324

  44. 9.8CVE-2022-20386EPSS 0.5%

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328

  45. 9.8CVE-2022-20385EPSS 0.4%

    a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is GSCAN_MAX), then it access polciy array 'policy[type]', which OOB access happens…

  46. 7.8CVE-2021-0943EPSS 0.1%

    In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat…

  47. 9.8CVE-2021-0942EPSS 0.4%

    The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]);With the c…

  48. 7.8CVE-2021-0871EPSS 0.1%

    In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no addition…

  49. 7.0CVE-2021-0697EPSS 0.08%

    In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  50. 7.8CVE-2022-39119EPSS 0.1%

    In network service, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed