Browse CVEs

HIGH 7.8 CVE-2022-20147 In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-20156 In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.5 CVE-2022-20149 Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A Android No fix yet Fix from $1,9502022-06-15 HIGH 7.5 CVE-2022-20151 Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A Android No fix yet Fix from $1,9502022-06-15 HIGH 7.0 CVE-2022-20141 In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when openi… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.0 CVE-2022-20155 In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This cou… Android Mitigation only Fix from $1,9502022-06-15 MEDIUM 6.7 CVE-2022-20152 In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Syst… Android Mitigation only Fix from $1,6002022-06-15 MEDIUM 6.7 CVE-2022-20153 In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privileg… Android Mitigation only Fix from $1,6002022-06-15 MEDIUM 6.4 CVE-2022-20148 In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System… Android No fix yet Fix from $1,6002022-06-15 MEDIUM 6.4 CVE-2022-20154 In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with Syst… Android Mitigation only Fix from $1,6002022-06-15 MEDIUM 5.5 CVE-2022-20143 In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local de… Android Mitigation only Fix from $1,6002022-06-15 MEDIUM 5.5 CVE-2022-20146 In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information… Android Mitigation only Fix from $1,6002022-06-15 CRITICAL 9.8 CVE-2022-20127EPSS 7% In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no add… Android Mitigation only Fix from $2,3002022-06-15 CRITICAL 9.8 CVE-2022-20130EPSS 9% In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote co… Android Mitigation only Fix from $2,3002022-06-15 HIGH 7.8 CVE-2022-20124 In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a per… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-20133 In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This could lead t… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-20134 In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-20135 In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escalation of privilege with User e… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.5 CVE-2022-20123 In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote i… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.5 CVE-2022-20131 In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.3 CVE-2021-39691 In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalati… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.3 CVE-2022-20126 In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permissio… Android Mitigation only Fix from $1,9502022-06-15 MEDIUM 6.8 CVE-2022-20125 In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if a… Android Mitigation only Fix from $1,6002022-06-15 MEDIUM 5.5 CVE-2022-20129 In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper inp… Android Mitigation only Fix from $1,6002022-06-15 MEDIUM 5.5 CVE-2022-30727 Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 Release 1 … Android Mitigation only Fix from $1,6002022-06-07 CRITICAL 9.8 CVE-2022-30722 Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Ac… Android Mitigation only Fix from $2,3002022-06-07 CRITICAL 9.1 CVE-2022-30711 Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $2,3002022-06-07 CRITICAL 9.1 CVE-2022-30712 Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Android No fix yet Fix from $2,3002022-06-07 CRITICAL 9.1 CVE-2022-30713 Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $2,3002022-06-07 HIGH 7.8 CVE-2022-30726 Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackers to la… Android Mitigation only Fix from $1,9502022-06-07