CVE-2021-39712

In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39712

CVE-2021-39712 is an Elevation of Privilege issue in the Android kernel tied to a race-condition leading to a possible user-after-free. The connected Pixel bulletin and related records confirm this vulnerability affects the Android kernel (upstream kernel) and can enable local privilege escalatio...

CVE-2021-39711

In bpfprogtestrunskb of testrun.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39731: Out-of-bounds Write

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-10996

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the iaxxx btp write words function of iaxxx-btp.c. This could lead to local information disclosure, requiring System execution privileges for exploitation. No...

PT-2022-11001

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an incorrect bounds check in the ProtocolStkProactiveCommandAdapter::Init function of protocolstkadapter.cpp, which could lead to a possible out of bounds read. This may result in local...

PT-2022-11004

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible memory corruption due to a double free in the gasket free coherent memory all function of gasket page table.c. This could lead to local...

PT-2022-11003

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the TuningProviderBase::GetTuningTreeSet function due to a missing bounds check. This could lead to local information disclosure, requiring System execution...

PT-2022-11006

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible information disclosure due to a race condition in the eicPresentationRetrieveEntryValue function of acropora/app/identity/libeic/EicPresentation.c. This could lead to local...

PT-2022-11009

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the ProtocolStkProactiveCommandAdapter::Init function, located in protocolstkadapter.cpp. This is due to an incorrect bounds check, which could lead to local...

CVE-2021-39729: Out-of-bounds Write

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39725: Double Free

In gasketfreecoherentmemoryall of gasketpagetable.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

CVE-2021-39722: Out-of-bounds Read

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-39718: Out-of-bounds Write

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-39719: Integer Overflow or Wraparound

In lwistopregisterio of lwisdevicetop.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

CVE-2021-39712: Concurrent Execution using Shared Resource with Improper Synchronization

In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39717: Out-of-bounds Read

In iaxxxbtpwritewords of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...

CVE-2022-20057

In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06271186; Issue ID: ALPS06271186...

Privilege escalation

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

Design/Logic Flaw

In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038...