4934 matches found
PT-2022-7032
Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible use-after-free due to a race condition in the Android kernel. This could lead to local escalation of privilege in the kernel, with System...
CVE-2021-39793
In kbasejduserbufpinpages of malikbasemem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
PT-2022-11009
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the ProtocolStkProactiveCommandAdapter::Init function, located in protocolstkadapter.cpp. This is due to an incorrect bounds check, which could lead to local...
PT-2022-10990
Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...
PT-2022-10994 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible leak of kernel memory and addresses due to log information disclosure in the show regs function of process.c. This could lead to local...
CVE-2021-39698: Use After Free
In aiopollcompletework of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
PT-2022-10997
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the ProtocolStkProactiveCommandAdapter::Init function, located in protocolstkadapter.cpp. This is due to an incorrect bounds check, which could lead to local...
CVE-2021-39793: Out-of-bounds Write
In kbasejduserbufpinpages of malikbasemem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
CVE-2021-39792: Concurrent Execution using Shared Resource with Improper Synchronization
In usbgadgetgivebackrequest of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
CVE-2021-39736: Integer Overflow or Wraparound
In prepareioentry and prepareresponse of lwisioctl.c and lwisperiodicio.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-39735: Concurrent Execution using Shared Resource with Improper Synchronization
In gasketalloccoherentmemory of gasketpagetable.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...
CVE-2021-39729: Out-of-bounds Write
In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-39726: Out-of-bounds Read
In cdParseMsg of cdcodec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-39727: Concurrent Execution using Shared Resource with Improper Synchronization
In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for...
CVE-2021-39722: Out-of-bounds Read
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-39720: Undefined Security Weakness
Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A...
CVE-2021-39719: Integer Overflow or Wraparound
In lwistopregisterio of lwisdevicetop.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...
CVE-2021-39718: Out-of-bounds Write
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-39714: Integer Overflow or Wraparound
In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-39712: Concurrent Execution using Shared Resource with Improper Synchronization
In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...