4933 matches found
CVE-2022-20402: Undefined Security Weakness
Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A...
PT-2022-14604
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a use after free in the lwis buffer alloc function of lwis buffer.c, which could lead to arbitrary code execution. This might result in local escalation of privilege, requiring System executio...
PT-2022-14599 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible bypass of configuration integrity due to improperly used crypto, which could lead to local escalation of privilege with no additional execution privileges needed. User interaction...
PT-2022-14609 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue concerns the Android kernel. No specific details about the nature of the problem or its potential impact are provided. Recommendations: At the moment, there is no informati...
CVE-2022-20377: Undefined Security Weakness
In TBD of keymasteripc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi...
PT-2022-14630
Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...
PT-2022-14606 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents whe...
PT-2022-14410 · Unknown · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel Description: In several functions of mali gralloc reference.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed...
CVE-2022-20375: Out-of-bounds Read
In LteRrcNrProAsnDecode of LteRrcNrCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
CVE-2022-20405: Undefined Security Weakness
Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A...
SUSE SLES15 Security Update : kernel (Live Patch 18 for SLE 15 SP3) (SUSE-SU-2022:2759-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2759-1 advisory. This update for the Linux Kernel 5.3.18-1503005968 fixes several issues. The following security issues were fixed: - CVE-2022-34918: Fixed a...
PT-2022-14627
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the cd CodeMsg function of cd codec.c, which could lead to a possible out of bounds write. This might result in remote code execution without requiring additional...
CVE-2022-20158: Use After Free
In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...
CVE-2022-20371: Improper Locking
In dmbowdtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2022-20379: Use After Free
In lwisbufferalloc of lwisbuffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
PT-2022-14603
Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...
CVE-2022-20365: Undefined Security Weakness
Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A...
PT-2022-14607 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write due to kernel stack overflow, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and user interaction ...
CVE-2022-20400: Out-of-bounds Write
In cdCodeMsg of cdcodec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...