CVE-2022-20366

In ioctldpmclkupdate of lwisioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20237

The CVE-2022-20237 entry affects Android kernel code, specifically the BuildDevIDResponse function in miscdatabuilder.cpp. A missing bounds check can cause an out-of-bounds write, which the provided documents state could enable remote code execution without extra privileges or user interaction. T...

CVE-2022-20158

In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

CVE-2022-20158

In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

CVE-2022-20158

In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

PT-2022-14627

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the cd CodeMsg function of cd codec.c, which could lead to a possible out of bounds write. This might result in remote code execution without requiring additional...

PT-2022-14628

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the SAEMM RetrievEPLMNList function of SAEMM ContextManagement.c due to a missing bounds check. This could lead to remote information disclosure...

CVE-2022-20369

In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

CVE-2022-20407: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A...

CVE-2022-20402: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A...

CVE-2022-20401: Out-of-bounds Read

In SAEMMRetrievEPLMNList of SAEMMContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure post-authentication with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20381: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A...

CVE-2022-20380: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A...

CVE-2022-20379: Use After Free

In lwisbufferalloc of lwisbuffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20375: Out-of-bounds Read

In LteRrcNrProAsnDecode of LteRrcNrCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20368: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel...

CVE-2022-20237: Out-of-bounds Write

In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20180: Undefined Security Weakness

In several functions of maligrallocreference.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20158: Use After Free

In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

PT-2022-14593 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write due to an integer overflow in the construct transaction function of lwis ioctl.c. This could lead to local escalation of privilege in the kernel, requiring...