PT-2022-14630

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2022-14627

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the cd CodeMsg function of cd codec.c, which could lead to a possible out of bounds write. This might result in remote code execution without requiring additional...

CVE-2022-20406: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A...

CVE-2022-20403: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A...

CVE-2022-20402: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A...

CVE-2022-20400: Out-of-bounds Write

In cdCodeMsg of cdcodec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20382: Uncontrolled Recursion

In TBD of TBD, there is a possible out of bounds write due to kernel stack overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-214245176References:...

CVE-2022-20381: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A...

CVE-2022-20379: Use After Free

In lwisbufferalloc of lwisbuffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20377: Undefined Security Weakness

In TBD of keymasteripc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi...

CVE-2022-20376: Improper Locking

In trustylogseqstart of trusty-log.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20375: Out-of-bounds Read

In LteRrcNrProAsnDecode of LteRrcNrCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20370: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A...

CVE-2022-20237: Out-of-bounds Write

In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20158: Use After Free

In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

CVE-2022-20366: Integer Overflow or Wraparound

In ioctldpmclkupdate of lwisioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20365: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A...

CVE-2022-20371: Improper Locking

In dmbowdtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2022-14633 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2022-14595

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue concerns the Android kernel. No specific details about the nature of the problem or its potential impact are provided. Recommendations At the moment, there is no information...