CVE-2022-20250

In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2022-20250

In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20243

In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-190199986...

CVE-2022-20242

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20241

In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0734

In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure of an installed package, without proper query permissions, with no additional execution privileges...

CVE-2021-0975

In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure of installed packages with no additional execution privileges needed. User interaction is not...

CVE-2022-20241

In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-6950 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to an insecure default value in hostapd, which could lead to a remote denial of service of the wifi hotspot. No additional execution privileges are needed, and user interaction is...

PT-2022-14539 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in KeyChain, allowing a possible spoof keychain chooser activity request. This could lead to local escalation of privilege with System execution...

PT-2022-14559 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for...

PT-2022-14486 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In ActivityManager, there is a possible way to check another process's capabilities due to a missing permission check. This could lead to local information disclosure with User execution privileges...

PT-2022-14521 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges...

PT-2022-14476 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible cleanup failure due to an uncaught exception in Bluetooth. This could lead to a remote denial of service in Bluetooth, with no additional execution privilege...

PT-2022-14548 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Us...

PT-2022-14516 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a permissions bypass in Midi, allowing potential access to private midi devices. This could lead to local escalation of privilege without requiring additional execution...

PT-2022-14537 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue allows for the potential obtainment of WiFi P2P MAC address without user consent due to a missing permission check in WifiP2pManager. This could lead to local information disclosure...

PT-2022-14523 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is caused by a logic error in the code, allowing for a possible bypass of factory reset protections in Settings. This could lead to local escalation of privilege with no additional execution...

PT-2022-14561 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission check. This could lead to local escalation of privilege...