CVE-2022-20579

In RadioImpl::setCdmaBroadcastConfig of rilservicelegacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20578

CVE-2022-20578 : Vulnerability in RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp can cause a stack clash and memory corruption, enabling local privilege escalation with System privileges required. The issue is exploitable locally (no user interaction) and affects Android kernels using...

CVE-2022-20598: Integer Overflow or Wraparound

In secmediaprotect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2022-20598

In secmediaprotect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

PT-2022-14805 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an integer overflow in the sec media protect function of media.c, which could lead to a local escalation of privilege in secure mode MFC Core. No additional execution privileges are needed,...

CVE-2022-42513: Out-of-bounds Write

In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-14776 · Unknown · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to an incorrect bounds check in the ufdt output strtab to fdt function of ufdt convert.c, which could lead to a possible out of bounds write. This could...

PT-2022-14786

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an incorrect bounds check in the ufdt do one fixup function of ufdt overlay.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege, with Syst...

PT-2022-26473 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the VsimOperationDataExt::encode function of vsimdata.cpp due to a missing bounds check. This could lead to local information disclosure, requiring System...

PT-2022-14812 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the SAECOMM SetDcnIdForPlmn function of SAECOMM DbManagement.c due to a missing bounds check. This could lead to remote information disclosure from a single...

CVE-2022-42509

In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20594

In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...

CVE-2022-42502

In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...

CVE-2022-42509

In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2022-14795 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to improper input validation in the valid va secbuf check function of drm access control.c. This could lead to local information disclosure, requiring System execution privileges for...

CVE-2022-42524: Out-of-bounds Read

In smsGetTpUdlIe of smsPduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

PT-2022-26486

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the sms GetTpUdlIe function of sms PduCodec.c due to a missing bounds check. This could lead to remote information disclosure with no additional execution...

PT-2022-14793

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to improper input validation in the ppmp validate wsm function of drm fw.c, which could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is...

PT-2022-14781 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an incorrect bounds check in the read ppmpu info function of drm fw.c, which could lead to a local information disclosure. This can be exploited without additional execution privileges or us...

PT-2022-14816 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an incorrect bounds check in Pixel cellular firmware, which could lead to a possible out of bounds read. This may result in local information disclosure without requiring additional executio...