CVE-2022-20413

In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2022-20393

In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure from the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVE-2022-20346

In updateAudioTrackInfoFromESDSMPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from the American company Google Google. A security vulnerability exists in Google Android 10, 11, 12, 12L. An attacker exploiting the vulnerability could result in local elevation of privilege...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in the Google Android Open Source Project AOSP, which stems from a vulnerability that allows an attacker to remotely execute code via Bluetooth without additional privileges. The followi...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android Open Source Project AOSP, which stems from an attacker exploiting information leakage to potentially enable further attacks. The following versions are affected: AOSP versio...

PT-2022-14446

Name of the Vulnerable Software and Affected Versions Android versions Android-12 through Android-12L Description The issue is related to a missing bounds check in the read attr value function of gatt db.cc, which could lead to a possible out of bounds write. This might result in remote code...

CVE-2022-20142

In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A buffer error vulnerability exists in System in Google Android versions prior to 10, 11, 12, and 12L. No information about this vulnerability is available at this time, so stay tuned to CNNVD or...

CVE-2022-20116

In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

CVE-2022-20007

In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation of privilege with no additional execution privileges neede...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in System 12, versions prior to 12L, in Google Android...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android prior to System 10, 11, 12, and 12L...

PT-2022-11078 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 through Android-12L Description: The issue is related to a possible out of bounds read in the l2cble process sig cmd function of l2c ble.cc due to a missing bounds check. This could lead to remote information...