Browse CVEs

HIGH 7.5 CVE-2021-0891 An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Product: AndroidVersions: Androi… Android Mitigation only Fix from $1,9502022-08-24 HIGH 7.5 CVE-2021-0946 The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMR_PDumpSymbolicAddr, and… Android Mitigation only Fix from $1,9502022-08-24 HIGH 7.5 CVE-2021-0947 The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and the… Android Mitigation only Fix from $1,9502022-08-24 MEDIUM 5.5 CVE-2021-0698 In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information di… Android Mitigation only Fix from $1,6002022-08-24 MEDIUM 5.5 CVE-2021-0887 In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information… Android Mitigation only Fix from $1,6002022-08-24 HIGH 8.8 CVE-2022-20362 In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no add… Android Mitigation only Fix from $1,9502022-08-12 MEDIUM 5.5 CVE-2022-20341 In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local information dis… Android Mitigation only Fix from $1,6002022-08-12 HIGH 7.8 CVE-2022-20319 In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20325 In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional execution p… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20329 In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20331 In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay attack. This could lead to local … Android Mitigation only Fix from $1,9502022-08-12 MEDIUM 6.8 CVE-2022-20313 In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 6.7 CVE-2022-20314 In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of pri… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 6.5 CVE-2022-20333 In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privile… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 6.5 CVE-2022-20334 In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no additional … Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20312 In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local i… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20317 In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local informati… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20322 In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosur… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20323 In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lead to local information disclo… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20324 In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20326 In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disclosure wi… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20332 In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information discl… Android Mitigation only Fix from $1,6002022-08-12 HIGH 7.8 CVE-2022-20292 In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20297 In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.6 CVE-2022-20302 In Settings, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.5 CVE-2022-20308 In hostapd, there is a possible insecure configuration due to an insecure default value. This could lead to remote denial of service of the wifi hots… Android Mitigation only Fix from $1,9502022-08-12 MEDIUM 6.7 CVE-2022-20306 In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20293 In LauncherApps, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclos… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20294 In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local infor… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20295 In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local in… Android Mitigation only Fix from $1,6002022-08-12