CVE-2022-21785: Out-of-bounds Write

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06807363; Issue ID: ALPS06807363...

PT-2022-15117

Name of the Vulnerable Software and Affected Versions MDP affected versions not specified Description The issue is related to a possible use after free due to a race condition in MDP. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not...

CVE-2022-21780: Out-of-bounds Write

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704526...

CVE-2022-21772: Concurrent Execution using Shared Resource with Improper Synchronization

In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493842; Issue ID: ALPS06493842...

CVE-2022-21769: Out-of-bounds Read

In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641687...

PT-2022-15115

Name of the Vulnerable Software and Affected Versions TEEI driver affected versions not specified Description The issue is related to a possible use after free due to a race condition in the TEEI driver. This could lead to local escalation of privilege with System execution privileges needed. Use...

PT-2022-15114

Name of the Vulnerable Software and Affected Versions TEEI driver affected versions not specified Description The issue is related to a possible use after free due to a race condition in the TEEI driver. This could lead to local escalation of privilege with System execution privileges needed. Use...

PT-2022-15113

Name of the Vulnerable Software and Affected Versions TEEI driver affected versions not specified Description The issue is related to a possible type confusion due to a race condition in the TEEI driver. This could lead to local escalation of privilege with System execution privileges needed. Use...

PT-2022-15112

Name of the Vulnerable Software and Affected Versions GED driver affected versions not specified Description The issue is related to a possible use after free due to a race condition in the GED driver. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2022-15116

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a possible use after free due to improper locking in the sched driver. This could lead to local escalation of privilege, with Syst...

PT-2022-15111

Name of the Vulnerable Software and Affected Versions Sound driver affected versions not specified Description The issue is related to a possible information disclosure in the sound driver due to symlink following. This could lead to local information disclosure with System execution privileges...

MELAG FTP Server 路径遍历漏洞

MELAG FTP Server is an FTP server from the German company MELAG. A security vulnerability exists in MELAG FTP Server version 2.2.0.4, which originates from a system that allows an attacker to break into the root directory of the FTP server and run it on the entire operating system using the CWD...

CVE-2022-20233

In paramfinddigestsinternal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20208

In parseRecursively of cppborparse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID...

CVE-2022-20174

In exynossecEnvinit of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

CVE-2022-20176

In authstore of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

CVE-2022-20178

In ioctldpmqosupdate and ioctleventcontrolset of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20148

In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...