PT-2022-26496

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to improper input validation in the trusty ffa mem reclaim function of shared-mem-smcall.c, which could lead to a local escalation of privilege. No additional execution privileges are needed, and...

CVE-2022-20580: Out-of-bounds Write

In ufdtdoonefixup of ufdtoverlay.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...

CVE-2022-42518

In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-42515

In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-42515

In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-26463 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write in the ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria function due to a missing bounds check. This could lead to local escalation of privilege, requiring...

PT-2022-14804 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an integer overflow in the ppmpu set of ppmpu.c, which could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is not required for...

PT-2022-14801 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write in the updateStart function of WirelessCharger.cpp due to a missing bounds check. This could lead to local escalation of privilege with System execution...

PT-2022-14778 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

CVE-2022-42522

In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2022-20589: Improper Input Validation

In validvasecbufcheck of drmaccesscontrol.c, there is a possible ID due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20569: Out-of-bounds Write

In thermalcoolingdevicestatsupdate of thermalsysfs.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20568

In TBD of TBD, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20562

In various functions of apinputprocessor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

PT-2022-26468

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write due to a missing bounds check in ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp. This could lead to local escalation of privilege with System...

CVE-2022-20585

In validoutofspecialsecdramaddr of drmaccesscontrol.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-42516

In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-26461

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the HexString2Value function of util.cpp, which could lead to a possible out of bounds write. This might result in local escalation of privilege, requiring System...

PT-2022-26473 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the VsimOperationDataExt::encode function of vsimdata.cpp due to a missing bounds check. This could lead to local information disclosure, requiring System...

PT-2022-14779 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a use after free in the extract metadata function of dm-android-verity.c, which could lead to corruption of kernel memory. This might result in local...