PT-2022-14388

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to improper input validation in the unflatten function of GraphicBuffer.cpp, which could lead to arbitrary code execution. This might result in local escalation of privilege without requiring...

CVE-2022-20173: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A...

CVE-2022-20171: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A...

CVE-2022-20175: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A...

PT-2022-14397

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue affects the Android kernel. No specific details about the nature of the problem or its potential impact are provided. Recommendations At the moment, there is no information...

PT-2022-14395

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue is related to the Android kernel. No specific details about the nature of the problem or its potential impact are provided. Recommendations At the moment, there is no...

PT-2022-14391

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2022-14396

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue concerns the Android kernel. No specific details about the nature of the problem or its potential impact are provided. Recommendations At the moment, there is no information...

PT-2022-14404

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2022-14413

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the hypx create blob dmabuf function of faceauth hypx.c, which could lead to a possible out of bounds write. This might result in local escalation of privilege,...

PT-2022-14406

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

CVE-2022-20183: Out-of-bounds Write

In hypxcreateblobdmabuf of faceauthhypx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

PT-2022-14386

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the TitanM chip due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is...

PT-2022-14414

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2022-14392

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an out of bounds read in the asn1 p256 int function of crypto/asn1.c due to an incorrect bounds check. This could lead to local information disclosure, requiring System execution privileges fo...

PT-2022-14415

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible use after free bug. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Recommendations For...

CVE-2022-20176: Use of Uninitialized Resource

In authstore of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

CVE-2022-20132: Out-of-bounds Read

In lgprobe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User...

CVE-2022-20182: Missing Authorization

In handleramdump of pixelloader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-14405 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: In the auth store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with...