cve.bz

google android vulnerabilities, newest first, page 75

Filter
  1. 7.5CVE-2022-20169EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A

  2. 7.5CVE-2022-20168EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A

  3. 9.8CVE-2022-20167EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A

  4. 6.7CVE-2022-20166EPSS 0.2%

    In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for …

  5. 4.4CVE-2022-20165EPSS 0.1%

    In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Prod…

  6. 9.8CVE-2022-20164EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A

  7. 4.4CVE-2022-20162EPSS 0.1%

    In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit…

  8. 9.8CVE-2022-20160EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A

  9. 4.4CVE-2022-20159EPSS 0.1%

    In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is n…

  10. 7.8CVE-2022-20156EPSS 0.1%

    In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need…

  11. 7.0CVE-2022-20155EPSS 0.08%

    In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. U…

  12. 6.4CVE-2022-20154EPSS 0.1%

    In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: A…

  13. 6.7CVE-2022-20153EPSS 0.1%

    In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed fo…

  14. 6.7CVE-2022-20152EPSS 0.1%

    In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: A…

  15. 7.5CVE-2022-20151EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A

  16. 7.5CVE-2022-20149EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A

  17. 6.4CVE-2022-20148EPSS 0.1%

    In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: And…

  18. 7.8CVE-2022-20147EPSS 0.1%

    In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n…

  19. 5.5CVE-2022-20146EPSS 0.1%

    In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information disclosure of private files with no additional execution privileges needed. User interact…

  20. 9.8CVE-2022-20145EPSS 7.2%

    In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional executio…

  21. 7.8CVE-2022-20144EPSS 0.1%

    In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges…

  22. 5.5CVE-2022-20143EPSS 0.1%

    In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for …

  23. 7.8CVE-2022-20142EPSS 0.2%

    In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User inter…

  24. 7.0CVE-2022-20141EPSS 0.1%

    In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interacti…

  25. 9.8CVE-2022-20140EPSS 8.7%

    In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  26. 7.8CVE-2022-20138EPSS 0.2%

    In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFILE_PROVISIONED intent due to a missing permission check. This could lead to local escalation of pri…

  27. 7.8CVE-2021-39806EPSS 0.1%

    In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during startup of servicemanager, if an attacker can trigger an initialization failure,…

  28. 7.3CVE-2022-20137EPSS 0.1%

    In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missing permission check. This could lead to local escalation of privilege with User execution privileges …

  29. 7.8CVE-2022-20135EPSS 0.2%

    In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: Andro…

  30. 7.8CVE-2022-20134EPSS 0.1%

    In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges…

  31. 7.8CVE-2022-20133EPSS 0.1%

    In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is…

  32. 4.6CVE-2022-20132EPSS 0.2%

    In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, …

  33. 7.5CVE-2022-20131EPSS 0.9%

    In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not ne…

  34. 9.8CVE-2022-20130EPSS 8.5%

    In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not neede…

  35. 5.5CVE-2022-20129EPSS 0.1%

    In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper input validation. This could lead to local denial of service with no additional execution pri…

  36. 9.8CVE-2022-20127EPSS 7.2%

    In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Produ…

  37. 7.3CVE-2022-20126EPSS 0.2%

    In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges n…

  38. 6.8CVE-2022-20125EPSS 0.1%

    In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges need…

  39. 7.8CVE-2022-20124EPSS 0.2%

    In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execu…

  40. 7.5CVE-2022-20123EPSS 0.9%

    In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is …

  41. 7.3CVE-2021-39691EPSS 0.1%

    In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed…

  42. 3.3CVE-2022-30728EPSS 0.1%

    Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.

  43. 5.5CVE-2022-30727EPSS 0.09%

    Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 Release 1 allows local attackers to set some setting value in work space.

  44. 4.6CVE-2022-30729EPSS 0.1%

    Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code scanner.

  45. 7.8CVE-2022-30726EPSS 0.10%

    Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackers to launch activities of SecSettingsIntelligence.

  46. 4.3CVE-2022-30725EPSS 0.1%

    Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.

  47. 4.3CVE-2022-30724EPSS 0.1%

    Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.

  48. 4.3CVE-2022-30723EPSS 0.1%

    Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth devic…

  49. 9.8CVE-2022-30722EPSS 0.3%

    Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account.

  50. 5.3CVE-2022-30721EPSS 0.2%

    Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.