PT-2022-14424

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction ...

PT-2022-14421

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description The issue is related to a logic error in the getUniqueUsagesWithLabels function of PermissionUsageHelper.java. This error can lead to incorrect permission attribution, potentially resulting in local...

PT-2022-14425

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description The issue is related to a permissions bypass in the recycle of Parcel.java, allowing a foreground activity to be started from the background. This could lead to local escalation of privilege with no...

PT-2022-14426

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the llcp dlc proc connect pdu function of llcp dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with...

PT-2022-14437

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the parseRecursively function of cppbor parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution...

PT-2022-14434

Name of the Vulnerable Software and Affected Versions Android version Android-12L Description The issue is related to improper input validation in the isFileUri function of FileUtil.java, which could allow bypassing the check for a file:// scheme. This might lead to local information disclosure...

PT-2022-14436

Name of the Vulnerable Software and Affected Versions Android version Android-12L Description In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with no additional execution...

PT-2022-14438

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the hme add new node to a sorted array function of hme utils.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no addition...

PT-2022-14423

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description The issue is related to the keystore library, where unsafe deserialization could prevent access to system settings, leading to a local denial of service. This requires user execution privileges and user...

PT-2022-14433 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-12L Description: In the registerRemoteBugreportReceivers function of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to local...

PT-2022-14435 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-12L Description: In the setPackageOrComponentEnabled function of NotificationManagerService.java, a missing permission check could lead to local information disclosure about enabled notification listeners. This issue...

PT-2022-14429 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12L Description: The issue is related to a possible leak of hotspot state due to a missing permission check in the updateApState function of SoftApManager.java. This could lead to local information disclosure with no...

PT-2022-14431

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the ih264 resi trans quant 4x4 sse42 function of ih264 resi trans quant sse42.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure...

PT-2022-14430 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12L Description: In the getAppSize function of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution...

PT-2022-14422

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the onCreate method of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction...

CVE-2021-39738

In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

Design/Logic Flaw

In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2022-20006

In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condition. This could lead to local escalation of privilege if a Guest user is enabled, with no additional execution privileges needed. User...

CVE-2022-20011

In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Input validation

In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...