CVE-2022-21779

CVE-2022-21779 affects the MediaTek WLAN driver (multiple MediaTek chips). The vulnerability is a missing bounds check that enables a local out-of-bounds write, leading to privilege escalation with SYSTEM execution privileges required; no user interaction is needed. Patch ID: ALPS06704526; Issue ...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21775

In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479032; Issue ID: ALPS06479032...

CVE-2022-21774

CVE-2022-21774 describes a use-after-free in the TEEI driver caused by a race condition, enabling local escalation of privileges to SYSTEM with no user interaction required. Documents from Red Hat and NVD confirm the flaw and patch ALPS06641447/ALPS06641447 as a fix. The available sources do not ...

CVE-2022-21774

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641447; Issue ID: ALPS06641447...

CVE-2022-21773

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641388; Issue ID: ALPS06641388...

CVE-2022-21773

CVE-2022-21773 describes a use-after-free in the TEEI driver caused by a race condition, enabling local escalation of privilege to System level without user interaction. Affected component: TEEI driver (details aligned with vendor advisories). The vulnerability could be triggered via a race in th...

CVE-2022-21771

CVE-2022-21771 affects the GED driver and is a use-after-free caused by a race condition, enabling local privilege escalation to System with no user interaction required. The vulnerability details indicate the impact is partial to higher in integrity/availability per CVSS, with local exploit prer...

CVE-2022-21771

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641585; Issue ID: ALPS06641585...

CVE-2022-21770

CVE-2022-21770 concerns a vulnerability in the sound driver where a symlink following flaw can lead to local information disclosure, with System execution privileges needed. The NVD entry states an impact on confidentiality, integrity, and availability (C/I/A: Partial/Partial/Partial) and a local...

CVE-2022-21769

In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641687...

CVE-2022-21766

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641653...

CVE-2022-21765

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641673...

MELAG FTP Server 路径遍历漏洞

MELAG FTP Server is an FTP server from the German company MELAG. A security vulnerability exists in MELAG FTP Server version 2.2.0.4, which originates from a system that allows an attacker to break into the root directory of the FTP server and run it on the entire operating system using the CWD...

CVE-2022-20208

In parseRecursively of cppborparse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID...

CVE-2022-20233

In paramfinddigestsinternal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20178

In ioctldpmqosupdate and ioctleventcontrolset of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20174

In exynossecEnvinit of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

CVE-2022-20176

In authstore of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...