CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2022-20162

CVE-2022-20162 is an information-disclosure flaw in the Android kernel’s crypto/asn1.c, specifically in the function asn1_p256_int, where an incorrect bounds check allows an out-of-bounds read. The impact is local information disclosure with system privileges required; exploitation requires no us...

CVE-2022-20159

CVE-2022-20159 affects the Android kernel via the asn1_ec_pkey_parse function in acropora/crypto/asn1_common.c. The issue is an out-of-bounds read caused by an incorrect bounds check, which can lead to local information disclosure with system privileges (no user interaction required). Exploitatio...

CVE-2022-20154

In locksocknested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20154

CVE-2022-20154 : In the Android kernel, the vulnerability occurs in lock_sock_nested() within sock.c due to a race that can cause a use-after-free, enabling local privilege escalation with SYSTEM privileges; exploitation does not require user interaction. The initial description notes this as a l...

CVE-2022-20153

In rcucblistdequeue of rcusegcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

CVE-2022-20153

In rcucblistdequeue of rcusegcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

CVE-2022-20148

In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20148

In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20148

In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20201: Out-of-bounds Read

In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid...

CVE-2022-20176: Use of Uninitialized Resource

In authstore of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

CVE-2022-20154: Concurrent Execution using Shared Resource with Improper Synchronization

In locksocknested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20148: Concurrent Execution using Shared Resource with Improper Synchronization

In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2022-14392

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an out of bounds read in the asn1 p256 int function of crypto/asn1.c due to an incorrect bounds check. This could lead to local information disclosure, requiring System execution privileges fo...

CVE-2022-20166: Out-of-bounds Write

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

PT-2022-14426

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the llcp dlc proc connect pdu function of llcp dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with...

CVE-2022-20159: Out-of-bounds Read

In asn1ecpkeyparse of acropora/crypto/asn1common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2022-14386

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the TitanM chip due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is...