Browse CVEs

HIGH 7.8 CVE-2022-20584 In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation. This could lead to local escalat… Android Mitigation only Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20585 In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local esc… Android Mitigation only Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20586 In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local esc… Android Mitigation only Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20587 In ppmp_validate_wsm of drm_fw.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no … Android Mitigation only Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20597 In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional exec… Android Mitigation only Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20598 In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode … Android Mitigation only Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20579 In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to loca… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20580 In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20581 In the Pixel camera driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20583 In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalatio… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20588 In sysmmu_map of sysmmu.c, there is a possible EoP due to a precondition check failure. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20594 In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of … Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20596 In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20599 In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to local escalation of privilege w… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20590 In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input validation. This could lead to lo… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20591 In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20592 In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation. This could lead to local informatio… Android Mitigation only Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-20561 In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no a… Android Mitigation only Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20569 In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation. This could lead … Android No fix yet Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20576 In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20577 In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20578 In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20570 Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A Android No fix yet Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20574 In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclos… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20575 In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20527 In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20531 In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. … Android Mitigation only Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-20512 In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improper input validation. This cou… Android Mitigation only Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20478 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20479 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13