Privilege escalation

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

CVE-2022-20057

In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06271186; Issue ID: ALPS06271186...

CVE-2022-20050

In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038...

CVE-2022-20057: Improper Handling of Exceptional Conditions

In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06271186; Issue ID: ALPS06271186...

Google Android elevation of privilege vulnerability (CNVD-2022-22952)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android versions prior to 10, 11, and 12. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this...

PT-2022-14296 · Vpu · Vpu

Name of the Vulnerable Software and Affected Versions: vpu affected versions not specified Description: The issue is related to a missing permission check in vpu, which could lead to a local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is...

Google Android elevation of privilege vulnerability (CNVD-2022-22955)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this vulnerability to cause a local...

CVE-2022-20050: Improper Link Resolution Before File Access

In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038...

PT-2022-14304

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to incorrect error handling in btif, which could lead to memory corruption. This might result in local escalation of privilege, requiring System execution...

CVE-2022-20049: Missing Authorization

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this vulnerability to cause a local...

Google Android 缓冲区错误漏洞

Google Android, a Linux-based open source operating system from Google, is vulnerable to buffer overflow. The vulnerability originates in the TitanM chip, where out-of-bounds writes may occur due to a lack of boundary checking. An attacker could exploit the vulnerability to cause a local privileg...

ASB-A-206090748

In multiple functions of odsignmain.cpp, there is a possible way to persist system attack due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-178379135

In showregs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-205753190

In TuningProviderBase::GetTuningTreeSet of tuningproviderbase.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-205036834

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-161010552

In usbgadgetgivebackrequest of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-154175781

In bpfprogtestrunskb of testrun.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-205035540

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-198653629

In iaxxxbtpwritewords of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...