CVE-2022-32640

In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441652; Issue ID: ALPS07441652...

CVE-2022-32646

In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363501; Issue ID: ALPS07363501...

CVE-2022-32637

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374...

PT-2023-13113 · Unknown · Wifi Driver

Name of the Vulnerable Software and Affected Versions: Wi-Fi driver affected versions not specified Description: The issue is related to incorrect error handling in the Wi-Fi driver, which could lead to local escalation of privilege with System execution privileges needed. User interaction is not...

CVE-2022-32635

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573237...

CVE-2022-32665

In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124...

PT-2023-13104 · Mediatek · Mtk-Isp

Name of the Vulnerable Software and Affected Versions: mtk-isp affected versions not specified Description: The issue is related to a logic error in mtk-isp, which could lead to a use after free scenario. This could result in local escalation of privilege, requiring System execution privileges. N...

PT-2023-13089 · Gps · Gps

Name of the Vulnerable Software and Affected Versions: gps affected versions not specified Description: The issue is related to a possible out of bounds write in gps due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Use...

PT-2023-13106 · Mediatek · Mtk-Aie

Name of the Vulnerable Software and Affected Versions: mtk-aie affected versions not specified Description: The issue is related to a possible use after free due to a logic error in mtk-aie. This could lead to local escalation of privilege with System execution privileges needed. User interaction...

PT-2023-13112 · Unknown · Wifi Driver

Name of the Vulnerable Software and Affected Versions: Wi-Fi driver affected versions not specified Description: The issue is related to incorrect error handling in the Wi-Fi driver, which could lead to local escalation of privilege with System execution privileges needed. User interaction is not...

PT-2023-13090 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to an integer overflow in keyinstall, which can cause an out of bounds write. This could lead to local escalation of privilege, requiring System execution privileges...

CVE-2022-32640

In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441652; Issue ID: ALPS07441652...

PT-2023-13093 · Watchdog · Watchdog

Name of the Vulnerable Software and Affected Versions: watchdog affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check in watchdog. This could lead to local escalation of privilege with System execution privileges needed...

PT-2023-13099 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to a possible information disclosure due to a race condition, which could lead to local information disclosure with System execution privileges needed. User interaction is...

CVE-2022-32637

CVE-2022-32637 affects the hevc decoder (MediaTek components) with a missing bounds check causing an out-of-bounds write. This can enable local privilege escalation to System level with no user interaction required. The patch identified is ALPS07491374 (Issue ID ALPS07491374). Exploitation detail...

ASB-A-253641805

In cfg80211updatenotlistednontrans of scan.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-257714327

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-246300272

In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-246933910

In exported content providers of ShannonRcs, there is a possible way to get access to protected content providers due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-42535

In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-2247701...