Code injection

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328...

Code injection

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000...

CVE-2022-20391

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000...

CVE-2022-20389

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004...

CVE-2022-20388

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323...

CVE-2022-20386

CVE-2022-20386 is listed in Android security bulletin details as affecting Android with Unisoc components (Unisoc U-1903099*). Severity is High. The connected sources do not provide concrete root-cause, exploit details, affected product versions, or a remediation/patch version. The CVE appears wi...

CVE-2022-20385

a function called 'nlaparse', do not check the len of para, it will check nlatype which can be controlled by userspace with 'maxtype' in this case, it is GSCANMAX, then it access polciy array 'policytype', which OOB access happens.Product: AndroidVersions: Android SoCAndroid ID: A-238379819...

CVE-2021-0943

In MMUMapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

CVE-2021-0871

In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

PT-2022-14614 · Unknown · Android Soc

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue affects Android SoC. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendations: At the...

PT-2022-14612 · Unknown · Android Soc

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue concerns Android SoC. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendations: At the...

PT-2022-14613 · Unknown · Android Soc

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue concerns Android SoC. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendations: At the...

PT-2022-9128 · Imagination Technologies +1 · Powervr +1

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: A missing size check in the PVRSRVBridgePMRPDumpSymbolicAddr function of the PowerVR kernel driver may cause an integer overflow, leading to out-of-bounds heap access. This cou...

CVE-2021-0946

The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMRPDumpSymbolicAddr, and then copies the buffer to userspace. The method PMRPDumpSymbolicAddr may fail, and if it does the buffer will be left uninitialized and despite the...

CVE-2021-0947

The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and then copies the buffer to userspace. The method TLServerDiscoverStreamsKM may fail for several reasons including invalid sizes. If this method fails th...

CVE-2021-39815

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it which makes it available to be freed, and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232440670...

CVE-2022-20122

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it which makes it available to be freed, and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232441339...

CVE-2021-0887

In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2021-0698

In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroi...

Design/Logic Flaw

In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...