Privilege escalation

Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions...

CVE-2022-48352

Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic...

Hacked Cellebrite and MSAB Software Released

Cellebrite is an cyberweapons arms manufacturer that sells smartphone forensic software to governments around the world. MSAB is a Swedish company that does the same thing. Someone has released software and documentation from both companies...

Recovering Smartphone Voice from the Accelerometer

Yet another smartphone side-channel attack: "EarSpy: Spying Caller Speech and Identity through Tiny Vibrations of Smartphone Ear Speakers": Abstract: Eavesdropping from the users smartphone is a well-known threat to the users safety and privacy. Existing studies show that loudspeaker reverberatio...

Google Pixel buffer overflow vulnerability (CNVD-2023-01492)

Google Pixel is a smartphone from Google, Inc. An attacker could use this vulnerability to remotely execute arbitrary code...

Google Pixel buffer overflow vulnerability (CNVD-2023-01493)

The Google Pixel is a smartphone from Google, Inc. The vulnerability can be exploited by attackers to execute unauthorized commands, which can gain system privileges and then perform various illegal operations...

Google Pixel Buffer Overflow Vulnerability (CNVD-2023-01494)

Google Pixel is a smartphone from Google, Inc. An attacker could exploit this vulnerability to remotely execute arbitrary code...

CVE-2022-46328

Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-46327

Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions...

CVE-2022-46313

The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone...

Design/Logic Flaw

Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions...

CVE-2022-46327

Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions...

CVE-2022-46313

The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone...

CVE-2022-46323

Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions...

CVE-2022-46327

Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions...

CVE-2022-41590

Some smartphones have authentication-related including session management vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vulnerability affects the smartphone availability...

CVE-2022-46322

Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions...

CVE-2022-46313

The CVE-2022-46313 entry concerns Huawei HarmonyOS sensor privacy module. It is described as an authentication vulnerability that, if exploited, could render the device camera and microphone unavailable. The available metrics indicate a CVSS v3.1 base score of 5.3 (Medium) with network attack vec...

PT-2022-27820 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns configuration problems in some smartphones. Successful exploitation may lead to privilege escalation, resulting in system service...

CVE-2022-41590

CVE-2022-41590 concerns Huawei HarmonyOS smartphones where the setup wizard can be bypassed, leading to authentication-related vulnerabilities that impact availability. Multiple sources (NVD, Red Hat, CNNVD, and related catalogs) describe an authentication bypass during initial setup, enabling lo...