Browse CVEs

HIGH 7.8 CVE-2022-23428 An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,9502022-02-11 HIGH 7.1 CVE-2022-23427 PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files witho… Android Mitigation only Fix from $1,9502022-02-11 MEDIUM 6.7 CVE-2022-23431 An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,6002022-02-11 MEDIUM 6.7 CVE-2022-23432 An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,6002022-02-11 MEDIUM 6.0 CVE-2022-23426 A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege. Android Mitigation only Fix from $1,6002022-02-11 MEDIUM 5.5 CVE-2022-22291 Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information thr… Android Mitigation only Fix from $1,6002022-02-11 CRITICAL 9.8 CVE-2021-39658 ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the permissions o… Android Mitigation only Fix from $2,3002022-02-11 CRITICAL 9.8 CVE-2021-39675EPSS 6% In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privil… Android Mitigation only Fix from $2,3002022-02-11 CRITICAL 9.1 CVE-2021-39635 ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps (No ph… Android Mitigation only Fix from $2,3002022-02-11 HIGH 7.8 CVE-2021-39663 In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due to a confused deputy. This co… Android Mitigation only Fix from $1,9502022-02-11 HIGH 7.8 CVE-2021-39672 In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation of privilege with no additional… Android Mitigation only Fix from $1,9502022-02-11 HIGH 7.8 CVE-2021-39676 In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This cou… Android Mitigation only Fix from $1,9502022-02-11 HIGH 7.5 CVE-2021-39677 In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-1… Android Mitigation only Fix from $1,9502022-02-11 MEDIUM 5.5 CVE-2021-39687 In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local inf… Android Mitigation only Fix from $1,6002022-02-11 MEDIUM 5.5 CVE-2021-39688 In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privil… Android No fix yet Fix from $1,6002022-02-11 CRITICAL 9.8 CVE-2021-39616 Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438 Android No fix yet Fix from $2,3002022-02-11 MEDIUM 5.5 CVE-2021-0524 In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages due to side channel informati… Android Mitigation only Fix from $1,6002022-02-11 HIGH 7.8 CVE-2022-20028 In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additio… Android Mitigation only Fix from $1,9502022-02-09 HIGH 7.8 CVE-2022-20031 In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional exec… Android Mitigation only Fix from $1,9502022-02-09 HIGH 7.8 CVE-2022-20040 In power_hal_manager_service, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502022-02-09 HIGH 7.8 CVE-2022-20041 In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502022-02-09 HIGH 7.8 CVE-2022-20043 In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502022-02-09 HIGH 7.8 CVE-2022-20044 In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional executio… Android Mitigation only Fix from $1,9502022-02-09 HIGH 7.8 CVE-2022-20045 In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional executio… Android Mitigation only Fix from $1,9502022-02-09 MEDIUM 6.8 CVE-2022-20034 In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of pr… Android Mitigation only Fix from $1,6002022-02-09 MEDIUM 6.7 CVE-2022-20030 In vow driver, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with Sy… Android Mitigation only Fix from $1,6002022-02-09 MEDIUM 6.7 CVE-2022-20038 In ccu driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002022-02-09 MEDIUM 6.7 CVE-2022-20039 In ccu driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System executi… Android Mitigation only Fix from $1,6002022-02-09 MEDIUM 5.5 CVE-2022-20036 In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no a… Android Mitigation only Fix from $1,6002022-02-09 MEDIUM 5.5 CVE-2022-20037 In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no a… Android Mitigation only Fix from $1,6002022-02-09