Browse CVEs

HIGH 7.1 CVE-2022-28783 Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packages withou… Android Mitigation only Fix from $1,9502022-05-03 MEDIUM 6.7 CVE-2022-28781 Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch … Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-28780 Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in We… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-28785 Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary deni… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-28786 Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary deni… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-28787 Improper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary deni… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-28788 Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary deni… Android Mitigation only Fix from $1,6002022-05-03 HIGH 7.8 CVE-2022-20084 In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check. This could lead to local escalatio… Android Mitigation only Fix from $1,9502022-05-03 HIGH 7.8 CVE-2022-20088 In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local escalation of privilege with Sys… Android Mitigation only Fix from $1,9502022-05-03 HIGH 7.8 CVE-2022-20093 In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502022-05-03 HIGH 7.8 CVE-2022-20099 In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System… Android Mitigation only Fix from $1,9502022-05-03 HIGH 7.8 CVE-2022-20109 In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with no additi… Android Mitigation only Fix from $1,9502022-05-03 HIGH 7.0 CVE-2022-20110 In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution pri… Android Mitigation only Fix from $1,9502022-05-03 MEDIUM 6.7 CVE-2022-20085 In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with Sys… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20087 In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20089 In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20094 In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20095 In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.4 CVE-2022-20090 In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.4 CVE-2022-20091 In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-20092 In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additi… Android Mitigation only Fix from $1,6002022-05-03 HIGH 7.8 CVE-2021-22556 The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pag… Fuchsia 4.1+ Fix from $1,9502022-05-03 HIGH 7.3 CVE-2021-22573 The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload co… Oauth Client Library For Java 1.33.3+ Fix from $1,9502022-05-03 MEDIUM 5.5 CVE-2022-0882 A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It … Fuchsia 4.1.1+ Fix from $1,6002022-05-03 HIGH 7.8 CVE-2021-39794 In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a m… Android Mitigation only Fix from $1,9502022-04-12 HIGH 7.8 CVE-2021-39797 In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local … Android Mitigation only Fix from $1,9502022-04-12 HIGH 7.8 CVE-2021-39798 In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escala… Android Mitigation only Fix from $1,9502022-04-12 HIGH 7.8 CVE-2021-39799 In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation. This could lead to local esca… Android Patch available Fix from $1,9502022-04-12 HIGH 7.8 CVE-2021-39801 In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no add… Android Patch available Fix from $1,9502022-04-12 HIGH 7.8 CVE-2021-39802 In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local esca… Android Patch available Fix from $1,9502022-04-12