PT-2022-14644 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 through Android-13 Description: The issue is related to an incorrect bounds check in the audioTransportsToHal function of HidlUtils.cpp, which could lead to a possible out of bounds write. This could result in loca...

PT-2022-14647 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: A logic error in the code of AppRestrictionController.java, specifically in the getBackgroundRestrictionExemptionReason function, allows for a possible bypass of device policy restrictions. This could...

PT-2022-14656 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a missing authorization in the system service, which lacks permission checks and protection. This results in a local elevation of privilege. Recommendations: For...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices is a series of Samsung mobile devices, including cell phones, tablets, etc. SAMSUNG Mobile devices Android S12 before 13.0.6.15, Android R11 13.0.6.14 has an access control error vulnerability, which originates from the existence of access control in ProfileSharingAccount i...

CVE-2022-20395

In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

CVE-2022-20392

In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission without user consent due to improper input validation. This could lead to local escalation of privilege during app installation or upgrade with no additional execution privileges...

PT-2022-14618 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to improper input validation in the declareDuplicatePermission function of ParsedPermissionUtils.java. This could allow an attacker to obtain a dangerous...

CVE-2022-36866

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

PT-2022-6213 · Ibm · Ibm Navigator Mobile

Name of the Vulnerable Software and Affected Versions: IBM Navigator Mobile Android versions 3.4.1.1 through 3.4.1.2 Description: The issue is related to improper access control, which could allow a local user to obtain sensitive information. This is due to errors in authorization. Recommendation...

CVE-2022-20406

Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A...

CVE-2022-20403

Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A...

CVE-2022-20404

Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A...

CVE-2022-20384

Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A...

PT-2022-14477 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: There is a permissions bypass issue in Wi-Fi, which could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is n...

PT-2022-14563 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to improper input validation in the HierarchicalUri.readFrom method of Uri.java, allowing a malformed Uri object to be crafted. This could lead to a local...

PT-2022-14602 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In the keymaster ipc.cpp, there is a possibility to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no...

PT-2022-14476 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible cleanup failure due to an uncaught exception in Bluetooth. This could lead to a remote denial of service in Bluetooth, with no additional execution privilege...

CVE-2022-20360

In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2022-20353

In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20347

In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...