CVE-2022-20100: Missing Authorization

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06270804...

CVE-2022-20099: Out-of-bounds Write

In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06296442; Issue ID: ALPS06296442...

CVE-2022-20103: Improper Link Resolution Before File Access

In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06282684...

CVE-2022-20096: Use of Uninitialized Resource

In camera, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06419003; Issue ID: ALPS06419003...

CVE-2022-20094: Out-of-bounds Write

In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479763; Issue ID: ALPS06479734...

CVE-2022-20089: Undefined Security Weakness

In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06240397; Issue ID: ALPS06240397...

CVE-2022-20091: Concurrent Execution using Shared Resource with Improper Synchronization

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; Issue ID: ALPS06226345...

CVE-2022-20090: Concurrent Execution using Shared Resource with Improper Synchronization

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209197; Issue ID: ALPS06209197...

CVE-2022-20087: Out-of-bounds Write

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06477970; Issue ID: ALPS06477970...

CVE-2022-20085: Improper Link Resolution Before File Access

In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06308877; Issue ID: ALPS06308877...

PT-2022-14352

Name of the Vulnerable Software and Affected Versions No specific software name or versions are mentioned in the provided descriptions. Description The issue is related to a stack-based buffer overflow in the voice service, which could lead to a local escalation of privilege. System execution...

PT-2022-14340

Name of the Vulnerable Software and Affected Versions In-camera software affected versions not specified Description The issue is related to a possible information disclosure due to uninitialized data. This could lead to local information disclosure, with System execution privileges needed for...

PT-2022-14331

Name of the Vulnerable Software and Affected Versions ccu affected versions not specified Description The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges required. User interaction...

CVE-2022-20095: Out-of-bounds Write

In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479763; Issue ID: ALPS06479763...

PT-2022-14339

Name of the Vulnerable Software and Affected Versions imgsensor affected versions not specified Description The issue is related to a possible out of bounds write in imgsensor due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed...

PT-2022-14344

Name of the Vulnerable Software and Affected Versions aee daemon affected versions not specified Description The issue is related to a missing permission check in the aee daemon, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user...

ASB-A-213464034

In packetsetring of afpacket.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Wondershare 安全漏洞

Wondershare is a data transfer tool. A security vulnerability exists in the latest version of Wondershare prior to 2021-12-06 that stems from incorrect access control. An attacker can use this vulnerability to send manually crafted packets to ElevationService.exe and execute arbitrary code withou...

Google Android Resource Management Error Vulnerability in Android (CNVD-2022-46287)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to a resource management error that could be exploited by an attacker with system execution privileges to cause a local privilege escalation in the kernel...

Google Android Buffer Overflow Vulnerability (CNVD-2022-44613)

Google Android is a Linux-based open source operating system from Google, a US-based company. The vulnerability stems from a possible out-of-bounds write in the TBD of the TBD due to memory corruption. An attacker could exploit the vulnerability to cause a local privilege escalation that requires...