4934 matches found
CVE-2021-39714
CVE-2021-39714 affects the Ion Memory Manager in the Linux kernel used by Android. The issue in the function ion_buffer_kmap_get can cause a use-after-free due to an integer overflow, leading to local elevation of privilege with no user interaction. Impact is described as partial to high (per CVE...
CVE-2021-39714
In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-39713
Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel...
CVE-2021-39711
The CVE-2021-39711 entry concerns the Linux kernel (Android kernel variant in the initial report) with a vulnerability in bpf_prog_test_run_skb() in test_run.c. The root cause is an out-of-bounds read due to an Incorrect Size Value, which can lead to local information disclosure and potentially p...
CVE-2021-39711
In bpfprogtestrunskb of testrun.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-39711
In bpfprogtestrunskb of testrun.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-39722: Out-of-bounds Read
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-39719: Integer Overflow or Wraparound
In lwistopregisterio of lwisdevicetop.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...
CVE-2021-39725: Double Free
In gasketfreecoherentmemoryall of gasketpagetable.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...
CVE-2021-39729: Out-of-bounds Write
In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-39723: Undefined Security Weakness
Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A...
CVE-2021-39731: Out-of-bounds Write
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-39717: Out-of-bounds Read
In iaxxxbtpwritewords of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...
PT-2022-11069
Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible use after free out of bounds read due to a race condition in the usb gadget giveback request function of core.c. This could lead to local...
PT-2022-7032
Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible use-after-free due to a race condition in the Android kernel. This could lead to local escalation of privilege in the kernel, with System...
PT-2022-11000
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write due to memory corruption, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is not...
PT-2022-4300
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a function kbase jd user buf pin pages in mali kbase mem.c, which is part of the graphics processor driver in Android operating system for Google Pixel devices. It involves an out-of-bounds...
PT-2022-11003
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the TuningProviderBase::GetTuningTreeSet function due to a missing bounds check. This could lead to local information disclosure, requiring System execution...
PT-2022-10996
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the iaxxx btp write words function of iaxxx-btp.c. This could lead to local information disclosure, requiring System execution privileges for exploitation. No...