CVE-2022-20235

CVE-2022-20235 describes a memory corruption risk in the PowerVR GPU kernel driver for Android SoCs caused by a flaw in the Information Page of the driver’s cache subsystem. Prior to DDK 1.18, a user-space process could write arbitrary data to that page (the page is normally writable only by the ...

CVE-2022-2035

The CVE-2022-2035 entry describes a reflected XSS in the SCORM Engine’s playerConfUrl parameter in /defaultui/player/modern.html. Affected versions are SCORM Engine < 20.1.45.914 and 21.1.x