Information disclosure

In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Androi...

Code injection

In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Cisco Patches High-Severity Vulnerability Affecting ASA and Firepower Solutions

Cisco on Wednesday released patches to contain multiple flaws in its software that could be abused to leak sensitive information on susceptible appliances. The issue, assigned the identifier CVE-2022-20866 CVSS score: 7.4, has been described as a "logic error" when handling RSA keys on devices...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android Bluetooth component, which stems from a logic error in the code and has a possible method to pair a display-only device without PIN confirmatio...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android 13 suffers from a security vulnerability that stems from a logic error in the code in Settings that could potentially bypass factory reset protection, which could lead to a local...

CVE-2022-20317

In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Androi...

CVE-2022-20317

CVE-2022-20317 affects Android 13 SystemUI. A logic error in SystemUI could allow local information disclosure by enabling the external speaker; exploitation requires user interaction and no extra privileges. The issue is documented across multiple sources (NVD entry, RH Red Hat CVE page, CNVD/CN...

CVE-2022-20292

In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

CVE-2022-20286

In Connectivity, there is a possible bypass the restriction of starting activity from background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20286

CVE-2022-20286 affects Android 13 under the Connectivity component. A logic error can bypass the restriction on starting activities from the background, potentially enabling local privilege escalation with user privileges and no user interaction required. Documented impact: local elevation of pri...

CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Code injection

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20257

In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20257

CVE-2022-20257 affects Android 13 Bluetooth by allowing pairing of a display-only device without PIN confirmation due to a logic error in the Bluetooth code. This enables local privilege escalation with no additional execution privileges required and no user interaction. The issue is documented a...

CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20248

CVE-2022-20248 affects Android 13 where a logic error in the Settings code can bypass DISALLOW_CONFIG_WIFI, enabling a local escalation of privilege to connect to an open network without user interaction. Affected component: Settings; impact: local Privilege Elevation with High confidentiality/in...

PT-2022-14518 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: The issue is caused by a logic error in the code, allowing bypass of factory reset protections in Settings. This could lead to local escalation of privilege with no additional execution privileges neede...

PT-2022-14480 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a logic error in the Bluetooth code, allowing a display-only device to be paired without PIN confirmation. This could lead to local escalation of privilege with no additional...

CVE-2022-20354

In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...