CVE-2022-20165: Out-of-bounds Read

In asn1parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20162: Out-of-bounds Read

In asn1p256int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20160: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A...

CVE-2022-20156: Improper Input Validation

In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20152: Out-of-bounds Write

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20146: Undefined Security Weakness

In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information disclosure of private files with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2022-20149: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A...

CVE-2022-20186: Improper Input Validation

In kbasememalias of malikbasememlinux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi...

CVE-2022-20190: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A...

PT-2022-14399 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

CVE-2022-20154: Concurrent Execution using Shared Resource with Improper Synchronization

In locksocknested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2022-14412 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a missing permission check in the handle ramdump function of pixel loader.c, which could allow the creation of a ramdump of non-secure memory. This may lead to local information disclosure,...

PT-2022-14381

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible incorrect file access due to a confused deputy in the uploadFile method of FileUploadServiceImpl.java. This could lead to local information disclosure of private files with no...

CVE-2022-20159: Out-of-bounds Read

In asn1ecpkeyparse of acropora/crypto/asn1common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20167: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A...

CVE-2022-20141: Concurrent Execution using Shared Resource with Improper Synchronization

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20169: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A...

SUSE SLES15 Security Update : kernel (Live Patch 18 for SLE 15 SP3) (SUSE-SU-2022:1989-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:1989-1 advisory. - In aiopollcompletework of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of...

PT-2022-4763 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to improper input validation in the kbase mem alias function of mali kbase mem linux.c, which could lead to arbitrary code execution and local escalation of privilege without requiring addition...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Kernel components Kernel in Google Android. There is no information about this vulnerability yet, please stay tuned to CNNVD or the vendor's announcement...