CVE-2022-20483

In several functions that parse avrc response in avrcparsct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20466

In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is...

PT-2022-14690 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to an incorrect bounds check in the toLanguageTag function of LocaleListCache.cpp, which could lead to a possible out of bounds read. This might result in remote...

PT-2022-14638 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible out of bounds write in the avdt msg asmbl function of avdt msg.cc due to a missing bounds check. This could lead to remote code execution over...

CVE-2022-4262

creationtimestamp| type| source ---|---|--- 2022-12-05 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=926 2022-12-05 11:10:43+00:00| exploited| https://t.me/truesecator/3783 2022-12-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=927 2022-12-06...

Google Pixel 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...

Google Pixel 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A code execution vulnerability exists in Google Android, which is caused by an out-of-range read in the toLanguageTag of LocaleListCache.cpp. An attacker could exploit this vulnerability to execute arbitrary code on th...

Google Pixel 安全漏洞

Google Android is a Linux-based open-source operating system from Google, a U.S. company. An attacker could exploit this vulnerability to elevate privileges...

PT-2022-14692

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-13 Description In the readLazyValue function of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation o...

Intel Support Android 安全漏洞

Intel Support Android is an Android application from Intel Corporation USA. A security vulnerability exists in Intel Support Android prior to version v22.02.28, which stems from incorrect default permissions that can lead to information disclosure...

CVE-2021-1050

In MMUUnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20447

In PANWriteBuf of panapi.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android...

CVE-2022-20450

In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVE-2022-20426

In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-14641 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: A local denial of service issue exists due to an uncaught exception in the AlarmManagerService.java. This could cause a device to enter a boot loop. No additional execution privilege...

CVE-2022-20446

In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20462

In phNxpNciHalwriteunlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...

PT-2022-14676 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to an integer overflow in the fdt next tag function of fdt.c, which could lead to a possible out of bounds write. This could result in local escalation of...

PT-2022-14665 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: A logic error in the code of Task.java allows for the launch of an unexported intent handler, potentially leading to local escalation of privilege. This issue can be exploited withou...

PT-2022-14677 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the getMountModeInternal function of StorageManagerService.java. This could lead to the prevention of package installation, potentially resulting in...