Browse CVEs

MEDIUM 5.5 CVE-2022-20590 In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input validation. This could lead to lo… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20591 In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20592 In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation. This could lead to local informatio… Android Mitigation only Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-20561 In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no a… Android Mitigation only Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20566 In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20568 In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no… Android Patch available Fix from $1,9502022-12-16 HIGH 7.5 CVE-2022-20560 Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A Android Patch available Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20557 In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation … Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20563 In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with System… Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20564 In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local e… Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20569 In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation. This could lead … Android No fix yet Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20571 In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escala… Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20572 In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local… Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20576 In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20577 In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20578 In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.4 CVE-2022-20567 In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with S… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20570 Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A Android No fix yet Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20574 In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclos… Android Mitigation only Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20575 In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… Android Mitigation only Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-20540 In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalat… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20547 In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing permission check. This could lea… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20548 In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20550 In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation … Android Patch available Fix from $1,9502022-12-16 HIGH 7.5 CVE-2022-20545 In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation. This could lead to re… Android Patch available Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20539 In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20546 In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of … Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20549 In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati… Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.7 CVE-2022-20554 In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege wi… Android Patch available Fix from $1,6002022-12-16 MEDIUM 6.5 CVE-2022-20553 In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack. This could lead… Android Patch available Fix from $1,6002022-12-16