763 matches found
PT-2022-14561 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission check. This could lead to local escalation of privilege...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android version 13, which stems from a lack of permission checking in PackageManager, and can be exploited by an attacker to gain access to sensitive information...
PT-2022-14533 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information...
PT-2022-14463 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the Messaging component, allowing the attachment of private files to SMS messages. This could lead to local information disclosure without requiring...
PT-2022-14484 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible crash loop due to resource exhaustion in the Phone app, which could lead to local persistent denial of service. This requires User execution privileges and does not...
PT-2022-14524 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges...
PT-2022-14525 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentService, there is a possible way to check if a given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android version 13, which stems from the leakage of side-channel information in Settings, which can be exploited by an attacker to gain access to sensitive information...
PT-2022-14509 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: There is a possible information disclosure in Telephony due to a missing permission check. This could lead to local information disclosure of phone accounts, requiring User execution privileges. No use...
PT-2022-14496 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible misunderstanding about the default SMS application's permission set due to misleading text in the PermissionController. This could lead to local information disclosur...
PT-2022-14548 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Us...
PT-2022-6950 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to an insecure default value in hostapd, which could lead to a remote denial of service of the wifi hotspot. No additional execution privileges are needed, and user interaction is...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from a vulnerability in its LocaleManager that allows an attacker to use side-channel probing to determine whether an application is installed without...
PT-2022-14470 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is caused by a logic error in the code, allowing a possible way to connect to an open network bypassing the DISALLOW CONFIG WIFI restriction in Settings. This could lead to local escalation o...
PT-2022-14513 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information...
PT-2022-14512 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure in AppSearchManagerService. This could lead to local...
PT-2022-14544 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User...
PT-2022-14531 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentService, there is a possible disclosure of available account types due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. Us...
Google Android 缓冲区错误漏洞
Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android version 13, which stems from a lack of boundary checking in Bluetooth, which could lead to out-of-bounds writes, and which could be exploited by an...
PT-2022-14552 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction...