PT-2022-26466

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the SimUpdatePbEntry::encode function of simdata.cpp due to a missing bounds check. This could lead to local escalation of privilege, requiring System executi...

PT-2022-26486

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the sms GetTpUdlIe function of sms PduCodec.c due to a missing bounds check. This could lead to remote information disclosure with no additional execution...

PT-2022-26474

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write due to a missing bounds check in the ProtocolEmbmsBuilder::BuildSetSession function of protocolembmsbuilder.cpp. This could lead to local escalation of privilege...

PT-2022-26494

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check, which could lead to a possible out of bounds read. This may result in local information disclosure, requiring System execution privileges for exploitation. User...

PT-2022-26492

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check, which could lead to a local information disclosure with System execution privileges needed. User interaction is not required for exploitation. Recommendations For Andro...

PT-2022-14784

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible stack clash leading to memory corruption in the RadioImpl::setGsmBroadcastConfig function of ril service legacy.cpp. This could lead to local escalation of privilege with System...

PT-2022-26482

Name of the Vulnerable Software and Affected Versions Android kernel Description A possible use after free issue in ServiceInterface::HandleRequest of serviceinterface.cpp could lead to local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is...

CVE-2022-20597

In ppmpuset of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243480506References: N...

CVE-2022-20594: Out-of-bounds Write

In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...

CVE-2022-42503

In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...

CVE-2022-20600

CVE-2022-20600 affects the Android kernel LWIS component. The issue is described as a memory corruption out-of-bounds write that could enable local privilege escalation to SYSTEM with no user interaction required. The available documents consistently note this as a local attack surface on Android...

CVE-2022-20600: Out-of-bounds Write

In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239847859References: N/A...

CVE-2022-42517

In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-42505: Out-of-bounds Write

In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...

CVE-2022-20581: Use After Free

In the Pixel camera driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-42531

In mmumapforfw of gsldfwload.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2022-20563

In TBD of ufdtconvert, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2022-14785 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible stack clash leading to memory corruption in the RadioImpl::setCdmaBroadcastConfig function of ril service legacy.cpp. This could lead to local escalation of privilege with System...

CVE-2022-20563

CVE-2022-20563 describes an out-of-bounds read caused by memory corruption in ufdt_convert within the Android kernel, enabling local privilege escalation to System. Exploitation is local with no user interaction; no remediation details are provided in the linked documents.

PT-2022-14775

Name of the Vulnerable Software and Affected Versions Android kernel Description In the ufdt convert function, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed...