Privilege escalation

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

CVE-2022-20057

In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06271186; Issue ID: ALPS06271186...

CVE-2022-20050

In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038...

CVE-2022-20057: Improper Handling of Exceptional Conditions

In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06271186; Issue ID: ALPS06271186...

Google Android elevation of privilege vulnerability (CNVD-2022-22952)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android versions prior to 10, 11, and 12. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this...

PT-2022-14296 · Vpu · Vpu

Name of the Vulnerable Software and Affected Versions: vpu affected versions not specified Description: The issue is related to a missing permission check in vpu, which could lead to a local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is...

Google Android elevation of privilege vulnerability (CNVD-2022-22955)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this vulnerability to cause a local...

CVE-2022-20050: Improper Link Resolution Before File Access

In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038...

PT-2022-14304

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to incorrect error handling in btif, which could lead to memory corruption. This might result in local escalation of privilege, requiring System execution...

CVE-2022-20049: Missing Authorization

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this vulnerability to cause a local...

Google Android 缓冲区错误漏洞

Google Android, a Linux-based open source operating system from Google, is vulnerable to buffer overflow. The vulnerability originates in the TitanM chip, where out-of-bounds writes may occur due to a lack of boundary checking. An attacker could exploit the vulnerability to cause a local privileg...

PUB-A-151455484

In gasketalloccoherentmemory of gasketpagetable.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-154175781

In bpfprogtestrunskb of testrun.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-161010552

In usbgadgetgivebackrequest of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-176918884

In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-206128522

In amcscdevunlockedioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-205753190

In TuningProviderBase::GetTuningTreeSet of tuningproviderbase.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-205243414

In tipccryptokeyrcv of net/tipc/crypto.c , there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

ASB-A-209607944

In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...