cve.bz

google android vulnerabilities, newest first, page 71

Filter
  1. 7.8CVE-2022-20383EPSS 0.1%

    In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i…

  2. 6.7CVE-2022-20382EPSS 0.1%

    In (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: And…

  3. 9.8CVE-2022-20381EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A

  4. 7.5CVE-2022-20380EPSS 0.3%

    Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A

  5. 6.7CVE-2022-20379EPSS 0.1%

    In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…

  6. 9.8CVE-2022-20378EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A

  7. 6.7CVE-2022-20377EPSS 0.1%

    In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n…

  8. 6.7CVE-2022-20376EPSS 0.08%

    In trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.…

  9. 7.5CVE-2022-20375EPSS 0.6%

    In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed f…

  10. 6.4CVE-2022-20373EPSS 0.08%

    In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…

  11. 6.7CVE-2022-20372EPSS 0.1%

    In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product…

  12. 6.4CVE-2022-20371EPSS 0.08%

    In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…

  13. 7.5CVE-2022-20370EPSS 0.3%

    Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A

  14. 6.7CVE-2022-20369EPSS 0.2%

    In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for …

  15. 7.8CVE-2022-20368EPSS 0.1%

    Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel

  16. 6.7CVE-2022-20367EPSS 0.1%

    In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not n…

  17. 6.7CVE-2022-20366EPSS 0.1%

    In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…

  18. 9.8CVE-2022-20365EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A

  19. 3.3CVE-2022-20252EPSS 0.1%

    In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privil…

  20. 3.3CVE-2022-20251EPSS 0.10%

    In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privile…

  21. 7.8CVE-2022-20250EPSS 0.1%

    In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interac…

  22. 3.3CVE-2022-20249EPSS 0.10%

    In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privile…

  23. 7.8CVE-2022-20248EPSS 0.1%

    In Settings, there is a possible way to connect to an open network bypassing DISALLOW_CONFIG_WIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed…

  24. 7.5CVE-2022-20247EPSS 0.6%

    In Media, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andro…

  25. 7.8CVE-2022-20246EPSS 0.09%

    In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges…

  26. 2.4CVE-2022-20245EPSS 0.1%

    In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is nee…

  27. 7.5CVE-2022-20244EPSS 0.2%

    In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if more than 100 bluetooth devices have been connected with no additional execution privileges needed. Us…

  28. 4.4CVE-2022-20243EPSS 0.07%

    In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing data with System execution privileges needed. User interaction is not needed for exploitation.Product:…

  29. 5.5CVE-2022-20242EPSS 0.10%

    In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges …

  30. 3.3CVE-2022-20241EPSS 0.10%

    In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need…

  31. 9.8CVE-2022-20237EPSS 0.7%

    In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed fo…

  32. 7.8CVE-2022-20180EPSS 0.1%

    In several functions of mali_gralloc_reference.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not…

  33. 6.7CVE-2022-20158EPSS 0.1%

    In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exp…

  34. 5.5CVE-2021-0975EPSS 0.10%

    In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure of installed packages with no addition…

  35. 5.5CVE-2021-0735EPSS 0.09%

    In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing permission check. This could lead to local information disclosure with no additional exec…

  36. 5.5CVE-2021-0734EPSS 0.10%

    In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure of an installed package, without proper qu…

  37. 9.8CVE-2022-20361EPSS 1.2%

    In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges ne…

  38. 7.8CVE-2022-20360EPSS 0.2%

    In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed f…

  39. 3.3CVE-2022-20358EPSS 0.2%

    In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges ne…

  40. 5.5CVE-2022-20357EPSS 0.1%

    In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed fo…

  41. 7.8CVE-2022-20356EPSS 0.1%

    In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input validation. This could lead to local escalation of privilege with no additional e…

  42. 5.5CVE-2022-20355EPSS 0.1%

    In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Pr…

  43. 7.8CVE-2022-20354EPSS 0.1%

    In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede…

  44. 5.5CVE-2022-20353EPSS 0.1%

    In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interac…

  45. 5.5CVE-2022-20352EPSS 0.10%

    In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information due to a missing permission check. This could lead to local information disclosure with no additiona…

  46. 5.5CVE-2022-20350EPSS 0.1%

    In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app due to improper input validation. This could lead to local information disclosure with Us…

  47. 7.8CVE-2022-20349EPSS 0.10%

    In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution pr…

  48. 7.8CVE-2022-20348EPSS 0.1%

    In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileg…

  49. 8.8CVE-2022-20347EPSS 1.1%

    In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. U…

  50. 6.5CVE-2022-20346EPSS 0.5%

    In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. Use…