PT-2022-15116

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a possible use after free due to improper locking in the sched driver. This could lead to local escalation of privilege, with Syst...

PT-2022-15114

Name of the Vulnerable Software and Affected Versions TEEI driver affected versions not specified Description The issue is related to a possible use after free due to a race condition in the TEEI driver. This could lead to local escalation of privilege with System execution privileges needed. Use...

PT-2022-15112

Name of the Vulnerable Software and Affected Versions GED driver affected versions not specified Description The issue is related to a possible use after free due to a race condition in the GED driver. This could lead to local escalation of privilege, with System execution privileges needed. User...

CVE-2022-21774: Concurrent Execution using Shared Resource with Improper Synchronization

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641447; Issue ID: ALPS06641447...

CVE-2022-21772: Concurrent Execution using Shared Resource with Improper Synchronization

In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493842; Issue ID: ALPS06493842...

PT-2022-15111

Name of the Vulnerable Software and Affected Versions Sound driver affected versions not specified Description The issue is related to a possible information disclosure in the sound driver due to symlink following. This could lead to local information disclosure with System execution privileges...

PT-2022-15109

Name of the Vulnerable Software and Affected Versions CCCI affected versions not specified Description The issue is related to a possible out of bounds read due to a missing bounds check in CCCI. This could lead to local information disclosure, requiring System execution privileges for...

PT-2022-15115

Name of the Vulnerable Software and Affected Versions TEEI driver affected versions not specified Description The issue is related to a possible use after free due to a race condition in the TEEI driver. This could lead to local escalation of privilege with System execution privileges needed. Use...

CVE-2022-21780: Out-of-bounds Write

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704526...

CVE-2022-21781: Out-of-bounds Write

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704433...

CVE-2022-21786: Incorrect Type Conversion or Cast

In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558822; Issue ID: ALPS06558822...

CVE-2022-21787: Out-of-bounds Write

In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558844; Issue ID: ALPS06558844...

CVE-2022-21775: Improper Locking

In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479032; Issue ID: ALPS06479032...

MELAG FTP Server 路径遍历漏洞

MELAG FTP Server is an FTP server from the German company MELAG. A security vulnerability exists in MELAG FTP Server version 2.2.0.4, which originates from a system that allows an attacker to break into the root directory of the FTP server and run it on the entire operating system using the CWD...

CVE-2022-20208

In parseRecursively of cppborparse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID...

CVE-2022-20233

In paramfinddigestsinternal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20174

In exynossecEnvinit of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

CVE-2022-20176

In authstore of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

CVE-2022-20178

In ioctldpmqosupdate and ioctleventcontrolset of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20148

In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...