PT-2022-14414

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2022-14383

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue concerns the Android kernel. No specific details about the nature of the problem or its potential impact are provided in the available information. There is no menti...

CVE-2022-20165: Out-of-bounds Read

In asn1parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20179: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A...

CVE-2022-20176: Use of Uninitialized Resource

In authstore of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

CVE-2022-20160: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A...

CVE-2022-20155: Concurrent Execution using Shared Resource with Improper Synchronization

In ipucorejqsmsgtransportkernelwritesync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20152: Out-of-bounds Write

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20167: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A...

PT-2022-14392

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an out of bounds read in the asn1 p256 int function of crypto/asn1.c due to an incorrect bounds check. This could lead to local information disclosure, requiring System execution privileges fo...

CVE-2022-20169: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A...

PT-2022-14411

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue affects the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

PT-2022-14412 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a missing permission check in the handle ramdump function of pixel loader.c, which could allow the creation of a ramdump of non-secure memory. This may lead to local information disclosure,...

CVE-2022-20190: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A...

CVE-2022-20146: Undefined Security Weakness

In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information disclosure of private files with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

PT-2022-14381

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible incorrect file access due to a confused deputy in the uploadFile method of FileUploadServiceImpl.java. This could lead to local information disclosure of private files with no...

PT-2022-14407

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an integer overflow in the ioctl dpm qos update and ioctl event control set functions, which could lead to a local escalation of privilege. System execution privileges are needed for...

PT-2022-14389

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the asn1 ec pkey parse function due to an incorrect bounds check. This could lead to local information disclosure, requiring System execution privileges for...

PT-2022-14413

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the hypx create blob dmabuf function of faceauth hypx.c, which could lead to a possible out of bounds write. This might result in local escalation of privilege,...

PT-2022-14395

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue is related to the Android kernel. No specific details about the nature of the problem or its potential impact are provided. Recommendations At the moment, there is no...