Page 70 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-20226 | Low | 3.9 | 2022-07-13 | In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. This could lead to local escalation of pr… |
CVE-2022-20225 | Medium | 5.5 | 2022-07-13 | In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a missing permission check. This could lea… |
CVE-2022-20224 | High | 7.5 | 2022-07-13 | In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosu… |
CVE-2022-20223 | High | 7.8 | 2022-07-13 | In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy… |
CVE-2022-20222 | Critical | 9.8 | 2022-07-13 | In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no addit… |
CVE-2022-20221 | Medium | 6.5 | 2022-07-13 | In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information… |
CVE-2022-20220 | High | 7.8 | 2022-07-13 | In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with… |
CVE-2022-20219 | Medium | 5.5 | 2022-07-13 | In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user's directories unencrypted due to a logic… |
CVE-2022-20218 | High | 7.8 | 2022-07-13 | In PermissionController, there is a possible way to get and retain permissions without user's consent due to a logic error in the code. This could lead to loca… |
CVE-2022-20217 | Medium | 6.5 | 2022-07-13 | There is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this issue to delete Fdn contact.Product: AndroidVersions: Android S… |
CVE-2022-20216 | Critical | 9.8 | 2022-07-13 | android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com.sprd.firewall has set exported as true… |
CVE-2022-20212 | High | 7.8 | 2022-07-13 | In wifi.RequestToggleWifiActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of pr… |
CVE-2022-33712 | Medium | 5.3 | 2022-07-12 | Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allow… |
CVE-2022-33704 | High | 8.5 | 2022-07-12 | Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities. |
CVE-2022-33703 | High | 8.5 | 2022-07-12 | Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities. |
CVE-2022-33702 | Medium | 6.2 | 2022-07-12 | Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass Knoxguard lock by factor… |
CVE-2022-33701 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in KnoxCustomManagerService prior to SMR Jul-2022 Release 1 allows attacker to call PowerManaer.goToSleep method which is… |
CVE-2022-33700 | Low | 2.0 | 2022-07-12 | Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log. |
CVE-2022-33699 | Low | 2.0 | 2022-07-12 | Exposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log. |
CVE-2022-33698 | Low | 3.3 | 2022-07-12 | Exposure of Sensitive Information in Telecom application prior to SMR Jul-2022 Release 1 allows local attackers to access ICCID via log. |
CVE-2022-33697 | Low | 3.3 | 2022-07-12 | Sensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul-2022 Release 1 allows local attackers with log access permissi… |
CVE-2022-33696 | Medium | 4.0 | 2022-07-12 | Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log. |
CVE-2022-33695 | Medium | 5.1 | 2022-07-12 | Use of improper permission in InputManagerService prior to SMR Jul-2022 Release 1 allows unauthorized access to the service. |
CVE-2022-33694 | Medium | 4.0 | 2022-07-12 | Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent br… |
CVE-2022-33693 | Low | 2.0 | 2022-07-12 | Exposure of Sensitive Information in CID Manager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log. |
CVE-2022-33692 | Medium | 4.0 | 2022-07-12 | Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log. |
CVE-2022-33691 | Medium | 6.2 | 2022-07-12 | A possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to interleave malicious operations. |
CVE-2022-33690 | Medium | 4.0 | 2022-07-12 | Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file. |
CVE-2022-33689 | Medium | 6.2 | 2022-07-12 | Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder ca… |
CVE-2022-33688 | Low | 3.3 | 2022-07-12 | Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permis… |
CVE-2022-33687 | Low | 3.3 | 2022-07-12 | Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log. |
CVE-2022-33686 | Low | 2.3 | 2022-07-12 | Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log. |
CVE-2022-33685 | Medium | 4.0 | 2022-07-12 | Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive inform… |
CVE-2022-30758 | Medium | 4.0 | 2022-07-12 | Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to access some protected information with privilege of… |
CVE-2022-30757 | Medium | 4.0 | 2022-07-12 | Improper authorization in isemtelephony prior to SMR Jul-2022 Release 1 allows attacker to obtain CID without ACCESS_FINE_LOCATION permission. |
CVE-2022-30756 | High | 8.5 | 2022-07-12 | Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder. |
CVE-2022-30755 | High | 7.3 | 2022-07-12 | Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit… |
CVE-2022-30754 | High | 8.5 | 2022-07-12 | Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppL… |
CVE-2022-30753 | Low | 3.3 | 2022-07-12 | Improper use of a unique device ID in unprotected SecSoterService prior to SMR Jul-2022 Release 1 allows local attackers to get the device ID without permissio… |
CVE-2022-30752 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap cli… |
CVE-2022-30751 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap cli… |
CVE-2022-30750 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in updateLastConnectedClientInfo function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wi… |
CVE-2022-21787 | Medium | 6.7 | 2022-07-06 | In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-21786 | Medium | 6.7 | 2022-07-06 | In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-21785 | Medium | 6.7 | 2022-07-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21784 | Medium | 6.7 | 2022-07-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21783 | Medium | 6.7 | 2022-07-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21782 | Medium | 6.7 | 2022-07-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21781 | Medium | 6.7 | 2022-07-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21780 | Medium | 6.7 | 2022-07-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21779 | Medium | 6.7 | 2022-07-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21777 | High | 7.8 | 2022-07-06 | In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execu… |
CVE-2022-21776 | Medium | 6.4 | 2022-07-06 | In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-21775 | Medium | 6.7 | 2022-07-06 | In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-21774 | Medium | 6.7 | 2022-07-06 | In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-21773 | Medium | 6.7 | 2022-07-06 | In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-21772 | Medium | 6.7 | 2022-07-06 | In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-21771 | Medium | 6.7 | 2022-07-06 | In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-21770 | Medium | 6.7 | 2022-07-06 | In sound driver, there is a possible information disclosure due to symlink following. This could lead to local information disclosure with System execution pri… |
CVE-2022-21769 | Medium | 4.4 | 2022-07-06 | In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2022-21768 | High | 8.8 | 2022-07-06 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-21767 | High | 8.8 | 2022-07-06 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-21766 | Medium | 6.7 | 2022-07-06 | In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2022-21765 | Medium | 6.7 | 2022-07-06 | In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2022-21764 | Medium | 5.5 | 2022-07-06 | In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no addit… |
CVE-2022-21763 | Medium | 5.5 | 2022-07-06 | In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no addit… |
CVE-2022-20082 | High | 7.0 | 2022-07-06 | In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges ne… |
CVE-2022-20203 | High | 7.8 | 2022-06-15 | In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalat… |
CVE-2022-20233 | Medium | 6.7 | 2022-06-15 | In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This coul… |
CVE-2022-20210 | Critical | 9.8 | 2022-06-15 | The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objec… |
CVE-2022-20209 | High | 7.5 | 2022-06-15 | In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informati… |
CVE-2022-20208 | Medium | 4.4 | 2022-06-15 | In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosu… |
CVE-2022-20207 | High | 7.8 | 2022-06-15 | In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of… |
CVE-2022-20206 | Medium | 5.5 | 2022-06-15 | In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead to local information disclosure about… |
CVE-2022-20205 | Medium | 5.5 | 2022-06-15 | In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation. This could lead to local info… |
CVE-2022-20204 | High | 7.8 | 2022-06-15 | In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission chec… |
CVE-2022-20202 | Medium | 6.5 | 2022-06-15 | In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to… |
CVE-2022-20201 | Medium | 6.7 | 2022-06-15 | In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privil… |
CVE-2022-20200 | Medium | 5.5 | 2022-06-15 | In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. This could lead to local information discl… |
CVE-2022-20198 | Medium | 4.4 | 2022-06-15 | In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2022-20197 | High | 7.8 | 2022-06-15 | In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass. This could lead to local escalatio… |
CVE-2022-20196 | Medium | 5.0 | 2022-06-15 | In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional exe… |
CVE-2022-20195 | Medium | 5.0 | 2022-06-15 | In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This could lead to local denial of service… |
CVE-2022-20194 | High | 7.8 | 2022-06-15 | In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of privilege with no additional execution pri… |
CVE-2022-20193 | High | 7.3 | 2022-06-15 | In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could l… |
CVE-2022-20192 | High | 7.8 | 2022-06-15 | In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a permissions bypass… |
CVE-2022-20191 | Critical | 9.8 | 2022-06-15 | Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A |
CVE-2022-20190 | High | 7.5 | 2022-06-15 | Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A |
CVE-2022-20188 | High | 7.5 | 2022-06-15 | Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A |
CVE-2022-20186 | High | 7.8 | 2022-06-15 | In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalatio… |
CVE-2022-20185 | Medium | 6.7 | 2022-06-15 | In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System execution privileges needed. User interacti… |
CVE-2022-20184 | High | 7.5 | 2022-06-15 | Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A |
CVE-2022-20183 | Medium | 6.7 | 2022-06-15 | In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2022-20182 | Medium | 4.4 | 2022-06-15 | In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check. This could lead to loc… |
CVE-2022-20181 | High | 7.5 | 2022-06-15 | Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A |
CVE-2022-20179 | High | 7.5 | 2022-06-15 | Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A |
CVE-2022-20178 | Medium | 6.7 | 2022-06-15 | In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow. This could lead to local esca… |
CVE-2022-20177 | High | 7.5 | 2022-06-15 | Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A |
CVE-2022-20176 | Medium | 4.4 | 2022-06-15 | In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosur… |
CVE-2022-20175 | High | 7.5 | 2022-06-15 | Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A |