CVE-2022-20450

In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

PT-2022-14674 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible method arbitrary code execution due to a confused deputy in the initializeFromParcelLocked method of BaseBundle.java. This could lead to local escalation of...

Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An attacker could exploit this vulnerability to cause a local denial of service without additional execute privileges...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. An attacker exploiting this vulnerability could result in a local privilege escalation without the need for additional execute privileges...

Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. An attacker exploiting this vulnerability could result in a local privilege escalation without the need for additional execute privileges...

Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An attacker could exploit this vulnerability to cause a local privilege escalation without additional execution privileges...

CVE-2020-4099 HCL Verse for Android is susceptible to an APK signing key check vulnerability

The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...

PT-2022-14684

Name of the Vulnerable Software and Affected Versions Android versions 10 through 13 Description A logic error in the code of KeyguardHostViewController.java and related files allows for a possible lockscreen bypass, leading to local escalation of privilege with no additional execution privileges...

CVE-2022-41797

Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a...

Android App "IIJ SmartKey" vulnerable to information disclosure

Overview Android App "IIJ SmartKey" provided by Internet Initiative Japan Inc. contains an information disclosure vulnerability CWE-200. Naoaki Iwakiri reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Under...

CVE-2022-20410

In avrcctrlparsvendorrsp of avrcparsct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

Code injection

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242258929...

PT-2022-14660 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue concerns an unauthorized service within the system service that lacks permission checks, leading to Local Elevation of Privilege. Recommendations: At the moment, there is...

PT-2022-14655 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android SoC Description: The issue is related to a missing authorization in the system service, which lacks a permission check. This results in a Local Elevation of Privilege. Recommendations: For Android versions Android SoC...

Google Pixel 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the getBackgroundRestrictionExceptionReason code of AppRestrictionController.java, which can be exploited by an attacker to elevate...