Browse CVEs

MEDIUM 6.7 CVE-2021-39719 In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.7 CVE-2021-39721 In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System executi… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.7 CVE-2021-39725 In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escal… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.4 CVE-2021-39712 In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with Syste… Android Mitigation only Fix from $1,6002022-03-16 HIGH 7.8 CVE-2021-39694 In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. T… Android Mitigation only Fix from $1,9502022-03-16 MEDIUM 5.5 CVE-2021-39624 In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User e… Android Mitigation only Fix from $1,6002022-03-16 HIGH 7.1 CVE-2022-25821 Improper use of SMS buffer pointer in Shannon baseband prior to SMR Mar-2022 Release 1 allows OOB read. Android Mitigation only Fix from $1,9502022-03-10 MEDIUM 6.2 CVE-2022-25822 An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash. Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 5.5 CVE-2022-25819 OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory. Android Mitigation only Fix from $1,6002022-03-10 CRITICAL 9.8 CVE-2022-25818 Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution. Android Mitigation only Fix from $2,3002022-03-10 HIGH 7.8 CVE-2022-25815 PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action wi… Android Mitigation only Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-25814 PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized ac… Android Mitigation only Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-24931 Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbi… Android Mitigation only Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-24928 Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP. Android Mitigation only Fix from $1,9502022-03-10 MEDIUM 6.6 CVE-2022-20059 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an a… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.6 CVE-2022-20060 In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privil… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.6 CVE-2022-20058 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an a… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2022-20057 In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002022-03-10 HIGH 7.8 CVE-2022-20054 In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no … Android Mitigation only Fix from $1,9502022-03-10 MEDIUM 6.8 CVE-2022-20055 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an a… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.6 CVE-2022-20056 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an a… Android Mitigation only Fix from $1,6002022-03-10 HIGH 7.8 CVE-2022-20053 In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,9502022-03-10 MEDIUM 5.5 CVE-2022-20051 In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.7 CVE-2022-20049 In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.7 CVE-2022-20050 In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,6002022-03-10 HIGH 7.8 CVE-2022-20047 In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-20048 In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502022-03-10 MEDIUM 6.5 CVE-2022-24925 Improper input validation vulnerability in SettingsProvider prior to Android S(12) allows privileged attackers to trigger a permanent denial of servi… Android Mitigation only Fix from $1,6002022-02-11 CRITICAL 9.8 CVE-2022-23425 Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base… Android Mitigation only Fix from $2,3002022-02-11 HIGH 7.8 CVE-2022-22292 Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity. Android Mitigation only Fix from $1,9502022-02-11