PT-2022-14474 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a side channel information disclosure in LocaleManager, allowing an attacker to determine if an app is installed without requiring query permissions. This could lead to local...

PT-2022-14544 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2022-14478 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a missing permission check in the SettingsProvider, allowing potential reading or modification of the default ringtone. This could result in local escalation of privilege without...

PT-2022-14538 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not...

PT-2022-14533 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information...

PT-2022-14520 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges...

PT-2022-14509 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: There is a possible information disclosure in Telephony due to a missing permission check. This could lead to local information disclosure of phone accounts, requiring User execution privileges. No use...

PT-2022-14525 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentService, there is a possible way to check if a given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution...

PT-2022-6950 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to an insecure default value in hostapd, which could lead to a remote denial of service of the wifi hotspot. No additional execution privileges are needed, and user interaction is...

PT-2022-14484 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible crash loop due to resource exhaustion in the Phone app, which could lead to local persistent denial of service. This requires User execution privileges and does not...

PT-2022-14507 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version 13 Description: In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android version 13, which stems from a lack of permission checking in PackageManager, and can be exploited by an attacker to gain access to sensitive information...

PT-2022-14527 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a missing permission check in Android, allowing an attacker to determine if an account exists on the device. This could lead to local information disclosure, requiring User execution...

PT-2022-14490 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a missing permission check in Bluetooth, allowing for the enablement or disablement of Bluetooth connections without user consent. This could lead to local escalation of privilege,...

PT-2022-14482 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interacti...

PT-2022-14549 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User...

PT-2022-14555 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in Wifi, allowing for the possibility of enabling Wifi without the necessary permissions. This could lead to a local escalation of privilege, with no...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the US company Google. A security vulnerability exists in Google Android 13, which stems from the failure to properly perform input validation during its messaging process. An attacker can attach files to messages without performin...

PT-2022-14522 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges...

PT-2022-14517 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosur...