Lucene search
+L

798 matches found

OSV
OSV
•added 2022/05/03 8:15 p.m.•16 views

CVE-2022-20109

In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; Issue ID: ALPS06399915...

7.8CVSS5.9AI score0.00114EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/03 8:15 p.m.•27 views

CVE-2022-20109

In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; Issue ID: ALPS06399915...

7.8CVSS0.00114EPSS
SaveExploits0References1
CVE
CVE
•added 2022/05/03 8:06 p.m.•125 views

CVE-2022-21743

CVE-2022-21743 affects the component referenced as ion , where an integer overflow can trigger a use-after-free vulnerability. This leads to potential local privilege escalation without requiring additional execution privileges or user interaction (per the provided descriptions). The issue is doc...

7.8CVSS7.7AI score0.00113EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/05/03 8:06 p.m.•46 views

CVE-2022-21743

In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06371108; Issue ID: ALPS06371108...

8AI score0.00113EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/05/03 8:06 p.m.•41 views

CVE-2022-20111

In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366069; Issue ID: ALPS06366069...

8.4AI score0.00119EPSS
SaveExploits0References1
CVE
CVE
•added 2022/05/03 8:06 p.m.•131 views

CVE-2022-20111

CVE-2022-20111 affects MediaTek ion (ion memory allocator) with a use-after-free caused by incorrect error handling, leading to local privilege escalation without user interaction. The vulnerability is described as requiring local access to exploit, with a potential for high-impact kernel/privile...

8.4CVSS8.1AI score0.00119EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/05/03 7:56 p.m.•171 views

CVE-2022-20110

CVE-2022-20110 affects the MediaTek ion component, where a race-condition triggers a use-after-free, enabling local elevation of privilege with no user interaction. Patch ALPS06399915/ALPS06399901 is referenced; Android bulletin materials indicate related SPL updates. Exploit code/details are not...

7CVSS7AI score0.00084EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/05/03 7:56 p.m.•44 views

CVE-2022-20110

In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; Issue ID: ALPS06399901...

7.3AI score0.00084EPSS
SaveExploits0References1
CVE
CVE
•added 2022/05/03 7:56 p.m.•219 views

CVE-2022-20109

CVE-2022-20109 affects MediaTek’s ion component (ALPS platform). The issue is a use-after-free caused by improper update of reference counts, enabling local escalation of privilege without additional execution privileges or user interaction. Patch ALPS06399915 exists (Issue ALPS06399915) as the r...

7.8CVSS7.8AI score0.00114EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/05/03 7:56 p.m.•40 views

CVE-2022-20109

In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; Issue ID: ALPS06399915...

8AI score0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/05/03 12:00 a.m.•15 views

PT-2022-14353 · Ion · Ion

Name of the Vulnerable Software and Affected Versions: ion affected versions not specified Description: The issue is related to a possible use after free due to improper update of reference count in ion. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS7.6AI score0.00114EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/03 12:00 a.m.•3 views

CVE-2022-20110: Time-of-check Time-of-use (TOCTOU) Race Condition

In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; Issue ID: ALPS06399901...

7CVSS7.2AI score0.00084EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/03 12:00 a.m.•4 views

PT-2022-14355

Name of the Vulnerable Software and Affected Versions ion affected versions not specified Description The issue is related to a possible use after free due to incorrect error handling in ion. This could lead to local escalation of privilege with no additional execution privileges needed. User...

8.4CVSS0.00119EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/03 12:00 a.m.•6 views

CVE-2022-20109: Undefined Security Weakness

In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; Issue ID: ALPS06399915...

7.8CVSS7.6AI score0.00114EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/03 12:00 a.m.•6 views

CVE-2022-21743: Integer Overflow or Wraparound

In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06371108; Issue ID: ALPS06371108...

7.8CVSS7.6AI score0.00113EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/03 12:00 a.m.•7 views

CVE-2022-20111: Improper Handling of Exceptional Conditions

In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366069; Issue ID: ALPS06366069...

8.4CVSS8AI score0.00119EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/03 12:00 a.m.•5 views

PT-2022-15083

Name of the Vulnerable Software and Affected Versions ion affected versions not specified Description The issue is related to a possible use after free due to an integer overflow in ion. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS0.00113EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/04/12 5:15 p.m.•15 views

CVE-2021-39800

In ionioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS6.2AI score0.00149EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/04/12 5:15 p.m.•16 views

CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS7.2AI score0.00122EPSS
SaveExploits0References2
NVD
NVD
•added 2022/04/12 5:15 p.m.•47 views

CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS0.00122EPSS
SaveExploits0References1
Rows per page
Query Builder