Lucene search
+L

4934 matches found

Positive Technologies
Positive Technologies
•added 2022/12/16 12:00 a.m.•20 views

PT-2022-14794 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a precondition check failure in the sysmmu map function of sysmmu.c. This could lead to a local escalation of privilege, requiring System execution...

6.7CVSS6.3AI score0.00129EPSS
SaveExploits0References3
CVE
CVE
•added 2022/12/16 12:00 a.m.•111 views

CVE-2022-20606

The CVE-2022-20606 entry concerns SAEMM_MiningCodecTableWithMsgIE in SAEMM_RadioMessageCodec.c, where a missing bounds check can cause an out-of-bounds read. This could enable remote information disclosure with system privileges required. User interaction is not required. Connected sources confir...

4.9CVSS4.9AI score0.00864EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/16 12:00 a.m.•9 views

CVE-2022-42518: Out-of-bounds Write

In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

6.7CVSS5.9AI score0.00174EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/16 12:00 a.m.•17 views

PT-2022-26464 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write due to an incorrect bounds check in the encodeCallNumber function of callreqdata.cpp. This could lead to local escalation of privilege with System execution...

6.7CVSS6.5AI score0.00178EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/16 12:00 a.m.•8 views

CVE-2022-20560: Improper Restriction of Operations within the Bounds of a Memory Buffer

Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A...

7.5CVSS5.7AI score0.00283EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/16 12:00 a.m.•14 views

PT-2022-14790 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to improper input validation in the page number of shared mem.c, which could lead to code execution in the secure world. This may result in local escalation of privilege without requiring...

7.8CVSS7.7AI score0.0013EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/16 12:00 a.m.•4 views

CVE-2022-20601: Improper Restriction of Operations within the Bounds of a Memory Buffer

Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A...

7.5CVSS5.7AI score0.00496EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/12/16 12:00 a.m.•49 views

CVE-2022-42530

In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4.6AI score0.00173EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/16 12:00 a.m.•17 views

PT-2022-14809 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

7.5CVSS7.3AI score0.00496EPSS
SaveExploits0References3
Mend
Mend
•added 2022/12/16 12:00 a.m.•6 views

CVE-2022-20566

In l2capchanput of l2capcore, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

8.5CVSS0.00217EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2022/12/16 12:00 a.m.•7 views

CVE-2022-20567

In pppol2tpcreate of l2tpppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.5AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/12/16 12:00 a.m.•48 views

CVE-2022-20566

In l2capchanput of l2capcore, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.9AI score0.00217EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/16 12:00 a.m.•4 views

PT-2022-26474

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write due to a missing bounds check in the ProtocolEmbmsBuilder::BuildSetSession function of protocolembmsbuilder.cpp. This could lead to local escalation of privilege...

6.7CVSS0.00173EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/16 12:00 a.m.•16 views

PT-2022-14788 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write in the ppmp unprotect mfcfw buf function of drm fw.c due to improper input validation. This could lead to local escalation of privilege with no additional...

7.8CVSS7.6AI score0.00103EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/12/16 12:00 a.m.•48 views

CVE-2022-20589

In validvasecbufcheck of drmaccesscontrol.c, there is a possible ID due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4.7AI score0.00127EPSS
SaveExploits0References1
CVE
CVE
•added 2022/12/16 12:00 a.m.•106 views

CVE-2022-42507

CVE-2022-42507 describes a potential out-of-bounds write in ProtocolSimBuilder::BuildSimUpdatePb3gEntry within the Android kernel, caused by a missing bounds check. The vulnerability could enable local escalation of privilege with System privileges required, and exploitation is stated as requirin...

6.7CVSS6.7AI score0.00173EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/12/16 12:00 a.m.•104 views

CVE-2022-20605

CVE-2022-20605 affects the Android kernel component SAECOMM_Utility.c, specifically the SAECOMM_CopyBufferBytes function. The underlying issue is an incorrect bounds check that enables an out-of-bounds read, leading to potential remote information disclosure without requiring additional privilege...

7.5CVSS7AI score0.00821EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/16 12:00 a.m.•7 views

PT-2022-26479

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write due to a missing bounds check in BroadcastSmsConfigsRequestData::encode of smsdata.cpp. This could lead to local escalation of privilege with System execution...

6.7CVSS0.00174EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/12/16 12:00 a.m.•9 views

CVE-2022-20610

In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240462530References: N/A...

8.3AI score0.00772EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/12/16 12:00 a.m.•46 views

CVE-2022-20590

In validvasecmfccheck of drmaccesscontrol.c, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andro...

5.4AI score0.00175EPSS
SaveExploits0References1
Rows per page
Query Builder