CVE-2022-3449

creationtimestamp| type| source ---|---|--- 2022-10-13 10:13:41+00:00| seen| https://t.me/truesecator/3555...

CVE-2022-41851

creationtimestamp| type| source ---|---|--- 2022-10-13 09:01:23+00:00| seen| https://t.me/cibsecurity/51096...

CVE-2022-42339

creationtimestamp| type| source ---|---|--- 2022-10-13 07:58:54+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus18/2022 2022-10-15 00:29:21+00:00| seen| https://t.me/cibsecurity/51512...

CVE-2022-38450

creationtimestamp| type| source ---|---|--- 2022-10-13 07:58:54+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus18/2022...

CVE-2022-42906

creationtimestamp| type| source ---|---|--- 2022-10-13 07:27:25+00:00| seen| https://t.me/cibsecurity/51304 2025-05-15 16:35:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16527...

CVE-2022-3473

creationtimestamp| type| source ---|---|--- 2022-10-13 07:27:19+00:00| seen| https://t.me/cibsecurity/51300...

CVE-2022-42901

creationtimestamp| type| source ---|---|--- 2022-10-13 07:27:18+00:00| seen| https://t.me/cibsecurity/51299...

CVE-2022-42715

creationtimestamp| type| source ---|---|--- 2022-10-12 16:26:41+00:00| seen| https://t.me/cibsecurity/51261 2022-10-13 16:43:33+00:00| seen| https://t.me/HacktivistOfGarudaOfficial/241 2022-10-13 16:43:33+00:00| seen| https://t.me/HacktivistOfGarudaOfficial/787...

CVE-2022-20420

In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2022-20419

In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20420

In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2022-20410

In avrcctrlparsvendorrsp of avrcparsct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2022-20416

In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

Code injection

In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

Code injection

In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

Code injection

In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Information disclosure

In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

Integer overflow

In avrcctrlparsvendorrsp of avrcparsct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

Out-of-bounds

In fdtnexttag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12...

Out-of-bounds

In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...