PT-2022-14509 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: There is a possible information disclosure in Telephony due to a missing permission check. This could lead to local information disclosure of phone accounts, requiring User execution privileges. No use...

PT-2022-14527 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a missing permission check in Android, allowing an attacker to determine if an account exists on the device. This could lead to local information disclosure, requiring User execution...

PT-2022-14478 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a missing permission check in the SettingsProvider, allowing potential reading or modification of the default ringtone. This could result in local escalation of privilege without...

PT-2022-14531 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentService, there is a possible disclosure of available account types due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. Us...

PT-2022-14488 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a permissions bypass in the Settings, allowing for local escalation of privilege with physical access to the device and no additional execution privileges needed. User interacti...

PT-2022-14477 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: There is a permissions bypass issue in Wi-Fi, which could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is n...

PT-2022-14558 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosu...

PT-2022-14522 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges...

PT-2022-14536 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in Telecomm, which could lead to the disclosure of registered self-managed phone accounts. This results in local information disclosure and requires...

PT-2022-14471 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue concerns a side channel information disclosure in LocaleManager, allowing an attacker to determine if an app is installed without query permissions. This could lead to local...

PT-2022-14518 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: The issue is caused by a logic error in the code, allowing bypass of factory reset protections in Settings. This could lead to local escalation of privilege with no additional execution privileges neede...

PT-2022-14538 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not...

PT-2022-14490 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a missing permission check in Bluetooth, allowing for the enablement or disablement of Bluetooth connections without user consent. This could lead to local escalation of privilege,...

PT-2022-14521 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges...

PT-2022-14463 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the Messaging component, allowing the attachment of private files to SMS messages. This could lead to local information disclosure without requiring...

PT-2022-14516 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a permissions bypass in Midi, allowing potential access to private midi devices. This could lead to local escalation of privilege without requiring additional execution...

PT-2022-14530 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a side channel information disclosure that could allow determination of a user's account, potentially leading to local information disclosure. This requires User execution privileges...

PT-2022-14476 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible cleanup failure due to an uncaught exception in Bluetooth. This could lead to a remote denial of service in Bluetooth, with no additional execution privilege...

CVE-2022-20320: Observable Discrepancy

In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0735: Missing Authorization

In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed fo...