CVE-2022-20238

CVE-2022-20238 describes a kernel memory mapping flaw in Android where remap_pfn_range can map memory outside the intended region because vma->vm_page_prot is user-controllable. The result is a potential writable mapping of kernel memory, enabling exploitation per several sources (Android kern...

CVE-2022-20238

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

CVE-2022-20236

CVE-2022-20236 is referenced in the Android Security Bulletin under Unisoc GPU; the affected component is a UNISOC GPU driver. The underlying root cause and specific impact are not detailed in the provided documents. The CVSS from NVD indicates HIGH impact with network attack vector and no user i...

CVE-2022-20236

A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709...

CVE-2022-20217

There is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this issue to delete Fdn contact.Product: AndroidVersions: Android SoCAndroid ID: A-232441378...

PT-2022-14459

Name of the Vulnerable Software and Affected Versions Android versions Android SoC Description The issue is related to an out-of-bounds oob problem in a drm driver, which could cause the system to crash or experience an elevation of privilege EOP. Recommendations For Android SoC, consider applyin...

CVE-2022-20236: Improper Restriction of Operations within the Bounds of a Memory Buffer

A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709...

CVE-2022-20238: Improper Restriction of Operations within the Bounds of a Memory Buffer

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

Rapid7 MDR Reduced Breaches by 90% via Greater Efficiency to Detect, Investigate, Respond to, and Remediate Breaches

When a security operations center SOC is operating at a deficit, they increase the possibility of beach reductions. That is, the likelihood they won’t be able to travel to any beaches – or any vacation destinations whatsoever – anytime in the near future. That can lead to burnout, which can lead ...

Today’s SOC Strategies Will Soon Be Inadequate

New research sponsored by Rapid7 explores the momentum behind security operations center SOC modernization and the role extended detection and response XDR plays. ESG surveyed over 370 IT and cybersecurity professionals in the US and Canada – responsible for evaluating, purchasing, and utilizing...

GSD-2022-1003338 soc: bcm: Check for NULL return of devm_kzalloc()

soc: bcm: Check for NULL return of devmkzalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1002981 soc: rockchip: Fix refcount leak in rockchip_grf_init

soc: rockchip: Fix refcount leak in rockchipgrfinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

PT-2022-31861

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A refcount leak was discovered in the j721e soc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31644

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A refcount leak was discovered in the j721e soc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.46...

PT-2022-31017

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A refcount leak was discovered in the j721e soc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.3,...

PT-2022-31371

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A refcount leak was discovered in the j721e soc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17.14...

Rapid7 MDR Delivered 549% ROI via Headcount Avoidance, Time Savings, and Breach Risk Reduction

In-house security organizations these days are operating at an extreme deficit. Skeleton crews are running entire security operations centers SOCs. A constant barrage of alerts is making it difficult for these teams to detect and investigate every alert and stay ahead of today’s evolving threats...

Gamification of Ethical Hacking and Hacking Esports

While ethical hacking is by no means a new or groundbreaking practice, the scale at which organizations and individuals are undertaking such initiatives continues to intensify, especially considering recent events such as the log4j vulnerability. Traditionally, ethical hacking is undertaken by...

PT-2025-25945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak bug was found in the Linux kernel, specifically in the ucc uart.c file. The issue arises in the soc info function where of find node by type returns a node pointer with a...

CVE-2022-20210

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS...