2038 matches found
CVE-2022-20386
CVE-2022-20386 is listed in Android security bulletin details as affecting Android with Unisoc components (Unisoc U-1903099*). Severity is High. The connected sources do not provide concrete root-cause, exploit details, affected product versions, or a remediation/patch version. The CVE appears wi...
CVE-2022-20385
CVE-2022-20385 affects Android and is tied to a nla_parse path that does not validate para length. Userspace can influence nla_type via maxtype (GSCAN_MAX) and trigger OOB access to the policy[type] array. This is described across multiple sources as a kernel/Android issue with potential for loca...
CVE-2022-20385
a function called 'nlaparse', do not check the len of para, it will check nlatype which can be controlled by userspace with 'maxtype' in this case, it is GSCANMAX, then it access polciy array 'policytype', which OOB access happens.Product: AndroidVersions: Android SoCAndroid ID: A-238379819...
CVE-2021-0943
In MMUMapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...
CVE-2021-0871
In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
CVE-2021-0697
In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid...
CVE-2021-0697
CVE-2021-0697 is a race-condition vulnerability in the PVRSRVRGXSubmitTransferKM path of rgxtransfer.c (PowerVR GPU) on Android SoCs. It enables a possible user-after-free leading to local escalation of privilege with no additional execution privileges required and no user interaction. Exploit st...
PT-2022-14614 · Unknown · Android Soc
Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue affects Android SoC. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendations: At the...
CVE-2022-20389: Undefined Security Weakness
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004...
CVE-2022-20385: Improper Validation of Specified Quantity in Input
a function called 'nlaparse', do not check the len of para, it will check nlatype which can be controlled by userspace with 'maxtype' in this case, it is GSCANMAX, then it access polciy array 'policytype', which OOB access happens.Product: AndroidVersions: Android SoCAndroid ID: A-238379819...
PT-2022-14613 · Unknown · Android Soc
Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue concerns Android SoC. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendations: At the...
CVE-2022-20386: Undefined Security Weakness
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328...
PT-2022-14612 · Unknown · Android Soc
Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue concerns Android SoC. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendations: At the...
CVE-2021-0697: Concurrent Execution using Shared Resource with Improper Synchronization
In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid...
CVE-2021-0942: Out-of-bounds Read
The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:sPA.uiAddr = pagetophyspsOSPageArrayData-pagearrayui32PageIndex;With the current PoC this crashes as an OOB read. However, given that the O...
PT-2022-9128 · Imagination Technologies +1 · Powervr +1
Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: A missing size check in the PVRSRVBridgePMRPDumpSymbolicAddr function of the PowerVR kernel driver may cause an integer overflow, leading to out-of-bounds heap access. This cou...
CVE-2022-20388: Undefined Security Weakness
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323...
CVE-2022-20390: Undefined Security Weakness
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002...