CVE-2022-20094: Out-of-bounds Write

In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479763; Issue ID: ALPS06479734...

CVE-2022-20091: Concurrent Execution using Shared Resource with Improper Synchronization

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; Issue ID: ALPS06226345...

CVE-2022-20085: Improper Link Resolution Before File Access

In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06308877; Issue ID: ALPS06308877...

CVE-2022-20108: Out-of-bounds Write

In voice service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330702; Issue ID: DTV03330702...

PT-2022-14352

Name of the Vulnerable Software and Affected Versions No specific software name or versions are mentioned in the provided descriptions. Description The issue is related to a stack-based buffer overflow in the voice service, which could lead to a local escalation of privilege. System execution...

CVE-2022-20088: Improper Handling of Exceptional Conditions

In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; Issue ID: ALPS06209201...

CVE-2022-20095: Out-of-bounds Write

In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479763; Issue ID: ALPS06479763...

PT-2022-14340

Name of the Vulnerable Software and Affected Versions In-camera software affected versions not specified Description The issue is related to a possible information disclosure due to uninitialized data. This could lead to local information disclosure, with System execution privileges needed for...

PT-2022-14339

Name of the Vulnerable Software and Affected Versions imgsensor affected versions not specified Description The issue is related to a possible out of bounds write in imgsensor due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed...

PT-2022-14359

Name of the Vulnerable Software and Affected Versions Android versions Android-12 through Android-12L Description In the broadcastServiceStateChanged function of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missing permissi...

ASB-A-213519176

In l2cbleprocesssigcmd of l2cble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-210118427

In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed...

ASB-A-204087139

In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...

Google Android Resource Management Error Vulnerability in Android (CNVD-2022-46287)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to a resource management error that could be exploited by an attacker with system execution privileges to cause a local privilege escalation in the kernel...

Google Android Buffer Overflow Vulnerability (CNVD-2022-44613)

Google Android is a Linux-based open source operating system from Google, a US-based company. The vulnerability stems from a possible out-of-bounds write in the TBD of the TBD due to memory corruption. An attacker could exploit the vulnerability to cause a local privilege escalation that requires...

Google Android Buffer Overflow Vulnerability (CNVD-2022-44551)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a buffer overflow vulnerability that originates in the TBD of the TBD, which can be read out of bounds due to a lack of boundary checking and can be exploited by attackers to cause local information...

Google Android Buffer Overflow Vulnerability (CNVD-2022-44550)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to cause a local information leak requiring system execution privileges...

Google Android Buffer Overflow Vulnerability (CNVD-2022-44554)

A buffer overflow vulnerability exists in Google Android, a Linux-based open source operating system from Google, Inc. The vulnerability originates in TuningProviderBase::GetTuningTreeSet in tuningproviderbase.cc, and may result in out-of-bounds reads due to a lack of boundary checking. An attack...

SUSE SLES15 Security Update : kernel (Live Patch 1 for SLE 15 SP3) (SUSE-SU-2022:1246-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1246-1 advisory. - In aiopollcompletework of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalati...

Out-of-bounds

In BitmapcreateFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...