CVE-2022-42503

In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...

PT-2022-14787 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a logic error in the Pixel camera driver code, which can lead to a use after free scenario. This could result in local escalation of privilege, requiring System execution privileges. No user...

PT-2022-26499

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description In the fdt path offset namelen function of fdt ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with Syste...

PT-2022-26490

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

PT-2022-26492

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check, which could lead to a local information disclosure with System execution privileges needed. User interaction is not required for exploitation. Recommendations For Andro...

PT-2022-26485

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the fillSetupDataCallInfo V1 6 function of ril service 1 6.cpp. This could lead to local escalation of privilege, requiring System execution privileges. No us...

PT-2022-26482

Name of the Vulnerable Software and Affected Versions Android kernel Description A possible use after free issue in ServiceInterface::HandleRequest of serviceinterface.cpp could lead to local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is...

PT-2022-26480

Name of the Vulnerable Software and Affected Versions Android kernel Description A possible stack clash leading to memory corruption was found in the CdmaBroadcastSmsConfigsRequestData::encode function of cdmasmsdata.cpp. This issue could lead to local escalation of privilege, requiring System...

PT-2022-26476

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the MiscService::DoOemSetRtpPktlossThreshold function of miscservice.cpp due to a missing bounds check. This could lead to local information disclosure,...

PT-2022-26471

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the StringsRequestData::encode function of requestdata.cpp due to improper input validation. This could lead to local escalation of privilege with System...

PT-2022-26474

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write due to a missing bounds check in the ProtocolEmbmsBuilder::BuildSetSession function of protocolembmsbuilder.cpp. This could lead to local escalation of privilege...

PT-2022-26479

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write due to a missing bounds check in BroadcastSmsConfigsRequestData::encode of smsdata.cpp. This could lead to local escalation of privilege with System execution...

PT-2022-26496

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to improper input validation in the trusty ffa mem reclaim function of shared-mem-smcall.c, which could lead to a local escalation of privilege. No additional execution privileges are needed, and...

PT-2022-26494

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check, which could lead to a possible out of bounds read. This may result in local information disclosure, requiring System execution privileges for exploitation. User...

PT-2022-26487

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write due to an incorrect bounds check in the fillSetupDataCallInfo V1 6 function of ril service 1 6.cpp. This could lead to local escalation of privilege with System...

CVE-2022-42510: Out-of-bounds Read

In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-42510

In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2022-26493 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible mitigation bypass due to Permissive Memory Allocation in the mmu map for fw function of gs ldfw load.c. This could lead to local escalation of privilege with no additional executi...

CVE-2022-42531: Allocation of Resources Without Limits or Throttling

In mmumapforfw of gsldfwload.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2022-42532

CVE-2022-42532 affects Google/Pixel firmware and the Android kernel: an out-of-bounds read due to a missing bounds check could allow local information disclosure with system execution privileges, requiring no user interaction. The issue is documented across multiple sources (Pixel firmware discus...