PT-2023-17833 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible way to corrupt memory due to a use after free, which could lead to local escalation of privilege with System execution privileges needed...

PT-2023-17845 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is caused by a logic error in the code of EUTRAN LCS ConvertLCS MOLRReq in LPP CommonUtil.c, leading to a possible out of bounds write. This could result in remote code execution with System execution...

PT-2023-17759 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a logic error in the removePermission method of PermissionManagerServiceImpl.java, which could allow obtaining dangerous...

CVE-2023-20971

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

CVE-2023-20637

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628588; Issue ID: ALPS07628588...

PT-2023-17503 · Unknown · Display Drm

Name of the Vulnerable Software and Affected Versions: Display DRM affected versions not specified Description: The issue is related to a missing bounds check in display drm, which could lead to a possible out of bounds write. This may result in local escalation of privilege, requiring System...

PT-2023-13096 · Ccd · Ccd

Name of the Vulnerable Software and Affected Versions: ccd affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition in ccd. This could lead to local escalation of privilege with System execution privileges needed. User interaction i...

PT-2023-12147 · Unknown · Config Manager

Name of the Vulnerable Software and Affected Versions: Config Manager affected versions not specified Description: The issue is related to a possible command injection in Config Manager due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker wi...

CVE-2022-32644

In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494473; Issue ID: ALPS07494473...

CVE-2022-20550

In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

PT-2022-14783 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write due to a missing bounds check in OemSimAuthRequest::encode of wlandata.cpp. This could lead to local escalation of privilege with System execution privileges...

UBUNTU-CVE-2022-20485

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-32622

In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363786; Issue ID: ALPS07363786...

CVE-2022-32619

In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07439659; Issue ID: ALPS07439659...

PT-2022-21399 · Google · Widevine

Name of the Vulnerable Software and Affected Versions: Widevine affected versions not specified Description: The issue is related to an incorrect bounds check, leading to a possible out of bounds write. This could result in local escalation of privilege, with System execution privileges needed...

PT-2022-14682 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: A logic error in the code of WifiServiceImpl's factoryReset function can preserve WiFi settings, leading to a local issue across network factory resets. This issue does not require...

CVE-2022-32607

In aee, there is a possible use after free due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07202891; Issue ID: ALPS07202891...

CVE-2022-32591

In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07257259; Issue ID: ALPS07257259...

PT-2022-17887 · Sensorhub · Sensorhub

Name of the Vulnerable Software and Affected Versions: sensorhub affected versions not specified Description: The issue is related to an incorrect calculation of buffer size in sensorhub, leading to a possible out of bounds write. This could result in local escalation of privilege, with System...

PT-2022-17886 · Vdec Fmt · Vdec Fmt

Name of the Vulnerable Software and Affected Versions: vdec fmt affected versions not specified Description: The issue is related to a possible use after free due to improper locking in vdec fmt. This could lead to local escalation of privilege, with System execution privileges needed. User...