Browse CVEs

HIGH 7.5 CVE-2022-20375 In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial o… Android Mitigation only Fix from $1,9502022-08-11 MEDIUM 6.7 CVE-2022-20366 In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of p… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 6.7 CVE-2022-20367 In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of … Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 6.7 CVE-2022-20372 In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with S… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 6.4 CVE-2022-20371 In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of p… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 6.4 CVE-2022-20373 In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of p… Android Mitigation only Fix from $1,6002022-08-11 CRITICAL 9.8 CVE-2022-20237 In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code e… Android Mitigation only Fix from $2,3002022-08-11 HIGH 7.8 CVE-2022-20180 In several functions of mali_gralloc_reference.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to lo… Android Mitigation only Fix from $1,9502022-08-11 MEDIUM 6.7 CVE-2022-20158 In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of… Android Patch available Fix from $1,6002022-08-11 MEDIUM 5.5 CVE-2021-0734 In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disclosure. … Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 5.5 CVE-2021-0735 In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 5.5 CVE-2021-0975 In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosu… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 5.5 CVE-2022-20242 In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… Android Mitigation only Fix from $1,6002022-08-11 CRITICAL 9.8 CVE-2022-20361 In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. Th… Android Patch available Fix from $2,3002022-08-10 HIGH 7.8 CVE-2022-20356 In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improp… Android Patch available Fix from $1,9502022-08-10 HIGH 7.8 CVE-2022-20360 In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the g… Android Patch available Fix from $1,9502022-08-10 MEDIUM 5.5 CVE-2022-20355 In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service… Android Patch available Fix from $1,6002022-08-10 MEDIUM 5.5 CVE-2022-20357 In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information di… Android Patch available Fix from $1,6002022-08-10 CRITICAL 9.8 CVE-2022-20239 remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be contr… Android Mitigation only Fix from $2,3002022-08-10 HIGH 8.8 CVE-2022-20345 In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502022-08-10 HIGH 8.8 CVE-2022-20347 In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escal… Android Patch available Fix from $1,9502022-08-10 HIGH 7.8 CVE-2022-20348 In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission che… Android Patch available Fix from $1,9502022-08-10 HIGH 7.8 CVE-2022-20349 In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction bypass due to a missing permissi… Android Patch available Fix from $1,9502022-08-10 HIGH 7.8 CVE-2022-20354 In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This could lead to local escalation … Android Patch available Fix from $1,9502022-08-10 HIGH 7.0 CVE-2022-20344 In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This could lead t… Android Patch available Fix from $1,9502022-08-10 MEDIUM 6.5 CVE-2022-20346 In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could… Android Patch available Fix from $1,6002022-08-10 MEDIUM 5.5 CVE-2022-20350 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app… Android Patch available Fix from $1,6002022-08-10 MEDIUM 5.5 CVE-2022-20352 In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information due to a m… Android Patch available Fix from $1,6002022-08-10 MEDIUM 5.5 CVE-2022-20353 In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation. This could lead to… Android Patch available Fix from $1,6002022-08-10 HIGH 7.8 CVE-2021-39696 In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no addition… Android Patch available Fix from $1,9502022-08-10