Browse CVEs

MEDIUM 5.5 CVE-2022-25819 OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory. Android Mitigation only Fix from $1,6002022-03-10 CRITICAL 9.8 CVE-2022-25818 Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution. Android Mitigation only Fix from $2,3002022-03-10 HIGH 7.8 CVE-2022-25815 PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action wi… Android Mitigation only Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-25814 PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized ac… Android Mitigation only Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-24931 Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbi… Android Mitigation only Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-24928 Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP. Android Mitigation only Fix from $1,9502022-03-10 MEDIUM 6.6 CVE-2022-20059 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an a… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.6 CVE-2022-20060 In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privil… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.6 CVE-2022-20058 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an a… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2022-20057 In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002022-03-10 HIGH 7.8 CVE-2022-20054 In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no … Android Mitigation only Fix from $1,9502022-03-10 MEDIUM 6.8 CVE-2022-20055 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an a… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.6 CVE-2022-20056 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an a… Android Mitigation only Fix from $1,6002022-03-10 HIGH 7.8 CVE-2022-20053 In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,9502022-03-10 MEDIUM 5.5 CVE-2022-20051 In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.7 CVE-2022-20049 In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002022-03-10 MEDIUM 6.7 CVE-2022-20050 In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,6002022-03-10 HIGH 7.8 CVE-2022-20047 In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-20048 In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-23729 When the device is in factory state, it can be access the shell without adb authentication process. The LG ID is LVE-SMP-210010. Android 11.0+ Fix from $1,9502022-03-04 HIGH 7.3 CVE-2022-25328 The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set … Fscrypt 0.3.3+ Fix from $1,9502022-02-25 MEDIUM 5.5 CVE-2022-25326 fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem … Fscrypt after 0.3.2 Fix from $1,6002022-02-25 MEDIUM 5.5 CVE-2022-25327 The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other u… Fscrypt 0.3.3+ Fix from $1,6002022-02-25 MEDIUM 5.5 CVE-2022-0247 An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO… Fuchsia 2022-01-03+ Fix from $1,6002022-02-25 HIGH 8.8 CVE-2022-0293 Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 97.0.4692.99+ Fix from $1,9502022-02-12 HIGH 8.8 CVE-2022-0295 Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interact… Chrome 97.0.4692.99+ Fix from $1,9502022-02-12 HIGH 8.8 CVE-2022-0296 Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interac… Chrome 97.0.4692.99+ Fix from $1,9502022-02-12 HIGH 8.8 CVE-2022-0297 Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 97.0.4692.99+ Fix from $1,9502022-02-12 HIGH 8.8 CVE-2022-0298 Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 97.0.4692.99+ Fix from $1,9502022-02-12 HIGH 8.8 CVE-2022-0300 Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage… Chrome 97.0.4692.99+ Fix from $1,9502022-02-12