cve.bz

google android vulnerabilities, newest first, page 74

Filter
  1. 6.7CVE-2022-21773EPSS 0.09%

    In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641388; …

  2. 6.7CVE-2022-21772EPSS 0.09%

    In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493842; …

  3. 6.7CVE-2022-21771EPSS 0.09%

    In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641585; I…

  4. 6.7CVE-2022-21770EPSS 0.1%

    In sound driver, there is a possible information disclosure due to symlink following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0…

  5. 4.4CVE-2022-21769EPSS 0.1%

    In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673…

  6. 8.8CVE-2022-21768EPSS 0.3%

    In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID…

  7. 8.8CVE-2022-21767EPSS 0.3%

    In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID…

  8. 6.7CVE-2022-21766EPSS 0.1%

    In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS066416…

  9. 6.7CVE-2022-21765EPSS 0.1%

    In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS066416…

  10. 5.5CVE-2022-21764EPSS 0.10%

    In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati…

  11. 5.5CVE-2022-21763EPSS 0.10%

    In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati…

  12. 7.0CVE-2022-20082EPSS 0.08%

    In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; I…

  13. 7.8CVE-2022-20203EPSS 0.1%

    In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalation of privilege,with no additional execution privileges needed. User interactio…

  14. 6.7CVE-2022-20233EPSS 0.1%

    In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed.…

  15. 9.8CVE-2022-20210EPSS 4.3%

    The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an att…

  16. 7.5CVE-2022-20209EPSS 0.8%

    In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i…

  17. 4.4CVE-2022-20208EPSS 0.1%

    In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for e…

  18. 7.8CVE-2022-20207EPSS 0.1%

    In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n…

  19. 5.5CVE-2022-20206EPSS 0.1%

    In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead to local information disclosure about enabled notification listeners with User execution privileges needed. User inter…

  20. 5.5CVE-2022-20205EPSS 0.1%

    In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interact…

  21. 7.8CVE-2022-20204EPSS 0.1%

    In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to local escalation of privilege with no additional execution…

  22. 6.5CVE-2022-20202EPSS 0.7%

    In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. U…

  23. 6.7CVE-2022-20201EPSS 0.1%

    In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for …

  24. 5.5CVE-2022-20200EPSS 0.1%

    In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not ne…

  25. 4.4CVE-2022-20198EPSS 0.1%

    In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction…

  26. 7.8CVE-2022-20197EPSS 0.1%

    In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction …

  27. 5.0CVE-2022-20196EPSS 0.1%

    In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: A…

  28. 5.0CVE-2022-20195EPSS 0.2%

    In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitati…

  29. 7.8CVE-2022-20194EPSS 0.1%

    In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android…

  30. 7.3CVE-2022-20193EPSS 0.1%

    In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could lead to local escalation of privilege by conflating apps with User execution priv…

  31. 7.8CVE-2022-20192EPSS 0.1%

    In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a permissions bypass. This could lead to local escalation of privilege with no additional execution …

  32. 9.8CVE-2022-20191EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A

  33. 7.5CVE-2022-20190EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A

  34. 7.5CVE-2022-20188EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A

  35. 7.8CVE-2022-20186EPSS 0.5%

    In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction …

  36. 6.7CVE-2022-20185EPSS 0.1%

    In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi…

  37. 7.5CVE-2022-20184EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A

  38. 6.7CVE-2022-20183EPSS 0.1%

    In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed …

  39. 4.4CVE-2022-20182EPSS 0.1%

    In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interact…

  40. 7.5CVE-2022-20181EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A

  41. 7.5CVE-2022-20179EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A

  42. 6.7CVE-2022-20178EPSS 0.1%

    In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…

  43. 7.5CVE-2022-20177EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A

  44. 4.4CVE-2022-20176EPSS 0.1%

    In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for ex…

  45. 7.5CVE-2022-20175EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A

  46. 4.4CVE-2022-20174EPSS 0.1%

    In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exp…

  47. 9.8CVE-2022-20173EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A

  48. 5.5CVE-2022-20172EPSS 0.1%

    In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need…

  49. 9.8CVE-2022-20171EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A

  50. 9.8CVE-2022-20170EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A