PT-2022-9135 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue arises from the method PVRSRVBridgeTLDiscoverStreams, which allocates a buffer on the heap and fills it via TLServerDiscoverStreamsKM. If TLServerDiscoverStreamsKM fails due t...

PT-2022-14364 · Google +1 · Android +1

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The PowerVR GPU driver has an issue where unprivileged apps can allocate pinned memory, unpin it, and continue using the page in GPU calls without requiring any privileges. Thi...

CVE-2022-2611

Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2022-20338

In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to a local escalation of privilege, preventing processes from validating URIs correctly, with no additional execution privileges needed. User...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability caused by a missing permission check in ConnectivityService. An attacker could use this vulnerability to obtain sensitive information...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android 13 suffers from a security vulnerability that stems from a lack of permission checking in Content, which could potentially learn about accounts that exist on the device, which could...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in the Google Android PermissionController component, which stems from misleading text that could misinterpret the permission set of the default SMS application...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates in ContentService, which allows checking the presence of an established account on the device due to a missing license check. An attacker...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. Google Android 13 suffers from a security vulnerability that stems from a local information leak...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android version 13, which stems from a logic error in the Settings code that can bypass the DISALLOWCONFIGWIFI restriction to connect to an open network, which can be exploited by a...

PT-2022-14568 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to an insecure default value in WiFi, which could lead to the disclosure of the WiFi password to the end user. This results in local information disclosure without requiring...

PT-2022-9139 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In the USB Manager, there is a possible way to determine whether an app is installed without query permissions due to side channel information disclosure. This could lead to local...

PT-2022-14481 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a configuration error in Bluetooth that could allow bypassing compiler exploit mitigations. This could lead to local escalation of privilege without requiring additional executi...

PT-2022-14471 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue concerns a side channel information disclosure in LocaleManager, allowing an attacker to determine if an app is installed without query permissions. This could lead to local...

PT-2022-14475 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a side channel information disclosure in PackageManager, allowing an attacker to determine whether an app is installed without requiring query permissions. This could lead to local...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from a vulnerability in its LocaleManager that allows an attacker to use side-channel probing to determine whether an application is installed without...

PT-2022-14511 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Connectivity, there is a possible bypass of the restriction of starting activity from background due to a logic error in the code. This could lead to local escalation of privilege with User executio...

PT-2022-14543 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information...

CVE-2022-20349

In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Design/Logic Flaw

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...