‼ CVE-2022-20578 ‼
📖 Read
via "National Vulnerability Database".
In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243509749References: N/A📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-20571 ‼
📖 Read
via "National Vulnerability Database".
In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234030265References: Upstream kernel📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20559 ‼
📖 Read
via "National Vulnerability Database".
In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-219739967📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20548 ‼
📖 Read
via "National Vulnerability Database".
In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240919398📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20592 ‼
📖 Read
via "National Vulnerability Database".
In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238976908References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20589 ‼
📖 Read
via "National Vulnerability Database".
In valid_va_secbuf_check of drm_access_control.c, there is a possible ID due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238841928References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20553 ‼
📖 Read
via "National Vulnerability Database".
In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244155265📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20577 ‼
📖 Read
via "National Vulnerability Database".
In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241762281References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20520 ‼
📖 Read
via "National Vulnerability Database".
In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of privilege or denial of server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227203202📖 Read
via "National Vulnerability Database".
‼ CVE-2022-42518 ‼
📖 Read
via "National Vulnerability Database".
In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242536278References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20609 ‼
📖 Read
via "National Vulnerability Database".
In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239240808References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20580 ‼
📖 Read
via "National Vulnerability Database".
In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243629453References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20539 ‼
📖 Read
via "National Vulnerability Database".
In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the audio server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237291425📖 Read
via "National Vulnerability Database".
‼ CVE-2022-42544 ‼
📖 Read
via "National Vulnerability Database".
In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390📖 Read
via "National Vulnerability Database".
‼ CVE-2022-42543 ‼
📖 Read
via "National Vulnerability Database".
In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-249998113References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20566 ‼
📖 Read
via "National Vulnerability Database".
In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel📖 Read
via "National Vulnerability Database".
‼ CVE-2022-42524 ‼
📖 Read
via "National Vulnerability Database".
In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243401445References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20540 ‼
📖 Read
via "National Vulnerability Database".
In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237291506📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20527 ‼
📖 Read
via "National Vulnerability Database".
In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC firmware with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-229994861📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20572 ‼
📖 Read
via "National Vulnerability Database".
In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35696 ‼
📖 Read
via "National Vulnerability Database".
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.📖 Read
via "National Vulnerability Database".