Browse CVEs

MEDIUM 5.5 CVE-2022-20303 In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission due to a missing permission ch… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20304 In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local informatio… Android Mitigation only Fix from $1,6002022-08-12 HIGH 8.8 CVE-2022-20283 In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no add… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20271 In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or insufficient UI. This could lead… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20274 In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User executi… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20281 In Core, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20282 In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20286 In Connectivity, there is a possible bypass the restriction of starting activity from background due to a logic error in the code. This could lead to… Android Mitigation only Fix from $1,9502022-08-12 MEDIUM 6.5 CVE-2022-20273 In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no addition… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20270 In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. This could lead to local information discl… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20272 In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could l… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20275 In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information … Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20276 In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information … Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20277 In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information … Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20278 In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local inf… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20279 In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information … Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20284 In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of phone … Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20285 In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information discl… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20287 In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20288 In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20289 In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20290 In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20291 In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… Android Mitigation only Fix from $1,6002022-08-12 HIGH 8.8 CVE-2022-20254 In Wi-Fi, there is a permissions bypass. This could lead to local escalation of privilege from the guest user with no additional execution privileges… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20258 In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20268 In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could … Android Mitigation only Fix from $1,9502022-08-12 MEDIUM 6.8 CVE-2022-20269 In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 6.5 CVE-2022-20253 In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of service in Bluetooth with no addi… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 6.4 CVE-2022-20256 In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execu… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-20259 In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no ad… Android Mitigation only Fix from $1,6002022-08-12