PT-2022-14721 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the onAttach method of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. This could lead to local escalation of privilege with...

PT-2022-14723 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a permissions bypass in the getNearbyNotificationStreamingPolicy function of DevicePolicyManagerService.java. This could lead to local information disclosure with no additional...

PT-2022-14427 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This could lead to local information disclosure with no additional execution privileges...

PT-2022-14726 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the decrypt 1 2 function of CryptoPlugin.cpp due to a missing bounds check. This could lead to local information disclosure without requiring...

PT-2022-14727 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds write due to a use after free in the acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator functions of...

PT-2022-14724 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: A missing permission check in the getNearbyAppStreamingPolicy function of DevicePolicyManagerService.java could lead to local information disclosure without requiring additional execution privileges. Us...

PT-2022-14767 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the ufdt get node by path len function of ufdt convert.c due to a missing bounds check. This could lead to local information disclosure, requiri...

PT-2022-14734 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible tapjacking/overlay attack in the onCreate of various files. This could lead to local escalation of privilege or denial of server with User execution privileges needed...

PT-2022-14741 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the HalCoreCallback of halcore.cc due to a missing bounds check. This could lead to local information disclosure from the NFC firmware with no...

PT-2022-14745 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible permission bypass in strings.xml due to a misleading string, which could lead to remote information disclosure of call logs without requiring additional execution...

CVE-2022-20550

In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

PT-2022-14749 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in the registerBroadcastReceiver method of RcsService.java. This could allow for a local escalation of privilege without requiring additional executio...

PT-2022-14765 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a tapjacking/overlay attack in the onCreate method of LogAccessDialogActivity.java. This could allow bypassing a permission check, leading to local escalation of privilege with...

PT-2022-14720 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing bounds check in the onMulticastListUpdateNotificationReceived function of UwbEventManager.java, which could lead to arbitrary code execution. This might result in loca...

PT-2022-14729 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to an integer overflow in the rw t3t act handle check ndef rsp function of rw t3t.cc, which could lead to a possible out of bounds read. This may result in remote information...

PT-2022-14737 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing bounds check in the IncFs GetFilledRangesStartingFrom function of incfs.cpp, which could lead to a possible out of bounds read. This may result in local information...

PT-2022-14743 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a logic error in the code of WifiDialogActivity.java, which could lead to a limited lockscreen bypass. This might result in local escalation of privilege in wifi settings withou...

PT-2022-14760 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in multiple functions of AdapterService.java, which could allow manipulation of Bluetooth state. This could lead to local escalation of privilege with...

PT-2022-14746 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to side channel information disclosure in Telecom, allowing an attacker to determine whether an app is installed without query permissions. This could lead to local...

PT-2022-14716 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In the onCreate method of WifiDppConfiguratorActivity.java, a missing permission check allows a guest user to add a WiFi configuration. This could lead to local escalation of privilege without needing...