2022 CVEs (page 77)
Page 77 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-42506 | Medium | 6.7 | 2022-12-16 | In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi… |
CVE-2022-42505 | Medium | 6.7 | 2022-12-16 | In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This… |
CVE-2022-42504 | Medium | 6.7 | 2022-12-16 | In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esc… |
CVE-2022-42503 | Medium | 6.7 | 2022-12-16 | In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This… |
CVE-2022-42502 | Medium | 6.7 | 2022-12-16 | In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2022-42501 | Medium | 6.7 | 2022-12-16 | In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Sy… |
CVE-2022-42367 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-42366 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-42360 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-42351 | Medium | 4.3 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A… |
CVE-2022-42343 | Medium | 6.5 | 2022-12-16 | Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitr… |
CVE-2022-38106 | Medium | 5.4 | 2022-12-16 | This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function. |
CVE-2022-35696 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-35694 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-31708 | Medium | 4.9 | 2022-12-16 | vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity rang… |
CVE-2022-31707 | High | 7.2 | 2022-12-16 | vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity rang… |
CVE-2022-25628 | High | 8.8 | 2022-12-16 | An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4 |
CVE-2022-25627 | Medium | 6.7 | 2022-12-16 | An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Man… |
CVE-2022-25626 | Medium | 5.3 | 2022-12-16 | An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server sid… |
CVE-2022-20610 | High | 8.8 | 2022-12-16 | In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with LTE authenticat… |
CVE-2022-20609 | Medium | 5.5 | 2022-12-16 | In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addit… |
CVE-2022-20608 | Medium | 5.5 | 2022-12-16 | In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no ad… |
CVE-2022-20607 | High | 8.8 | 2022-12-16 | In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authen… |
CVE-2022-20606 | Medium | 4.9 | 2022-12-16 | In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remot… |
CVE-2022-20605 | High | 7.5 | 2022-12-16 | In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information… |
CVE-2022-20604 | Medium | 5.5 | 2022-12-16 | In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati… |
CVE-2022-20603 | High | 7.2 | 2022-12-16 | In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exe… |
CVE-2022-20602 | High | 7.5 | 2022-12-16 | Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A |
CVE-2022-20601 | High | 7.5 | 2022-12-16 | Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A |
CVE-2022-20600 | High | 7.8 | 2022-12-16 | In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privile… |
CVE-2022-20599 | Medium | 6.7 | 2022-12-16 | In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to local escalation of privilege with System… |
CVE-2022-20598 | High | 7.8 | 2022-12-16 | In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core w… |
CVE-2022-20597 | High | 7.8 | 2022-12-16 | In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution priv… |
CVE-2022-20596 | Medium | 6.7 | 2022-12-16 | In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi… |
CVE-2022-20595 | Medium | 4.4 | 2022-12-16 | In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati… |
CVE-2022-20594 | Medium | 6.7 | 2022-12-16 | In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2022-20593 | Medium | 4.4 | 2022-12-16 | In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2022-20592 | Medium | 5.5 | 2022-12-16 | In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation. This could lead to local information disclosu… |
CVE-2022-20591 | Medium | 5.5 | 2022-12-16 | In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no a… |
CVE-2022-20590 | Medium | 5.5 | 2022-12-16 | In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input validation. This could lead to local inform… |
CVE-2022-20589 | Medium | 4.4 | 2022-12-16 | In valid_va_secbuf_check of drm_access_control.c, there is a possible ID due to improper input validation. This could lead to local information disclosure with… |
CVE-2022-20588 | Medium | 6.7 | 2022-12-16 | In sysmmu_map of sysmmu.c, there is a possible EoP due to a precondition check failure. This could lead to local escalation of privilege with System execution… |
CVE-2022-20587 | High | 7.8 | 2022-12-16 | In ppmp_validate_wsm of drm_fw.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no additional… |
CVE-2022-20586 | High | 7.8 | 2022-12-16 | In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local escalation of… |
CVE-2022-20585 | High | 7.8 | 2022-12-16 | In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local escalation of… |
CVE-2022-20584 | High | 7.8 | 2022-12-16 | In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation. This could lead to local escalation of pri… |
CVE-2022-20583 | Medium | 6.7 | 2022-12-16 | In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privi… |
CVE-2022-20582 | High | 7.8 | 2022-12-16 | In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privi… |
CVE-2022-20581 | Medium | 6.7 | 2022-12-16 | In the Pixel camera driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System e… |
CVE-2022-20580 | Medium | 6.7 | 2022-12-16 | In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privil… |
CVE-2022-20579 | Medium | 6.7 | 2022-12-16 | In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalati… |
CVE-2022-20578 | Medium | 6.7 | 2022-12-16 | In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalatio… |
CVE-2022-20577 | Medium | 6.7 | 2022-12-16 | In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2022-20576 | Medium | 6.7 | 2022-12-16 | In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi… |
CVE-2022-20575 | Medium | 5.5 | 2022-12-16 | In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with n… |
CVE-2022-20574 | Medium | 5.5 | 2022-12-16 | In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with n… |
CVE-2022-20572 | Medium | 6.7 | 2022-12-16 | In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalatio… |
CVE-2022-20571 | Medium | 6.7 | 2022-12-16 | In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of pr… |
CVE-2022-20570 | Medium | 5.5 | 2022-12-16 | Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A |
CVE-2022-20569 | Medium | 6.7 | 2022-12-16 | In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation. This could lead to local e… |
CVE-2022-20568 | High | 7.8 | 2022-12-16 | In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additiona… |
CVE-2022-20567 | Medium | 6.4 | 2022-12-16 | In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System exec… |
CVE-2022-20566 | High | 7.8 | 2022-12-16 | In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additiona… |
CVE-2022-20564 | Medium | 6.7 | 2022-12-16 | In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation… |
CVE-2022-20563 | Medium | 6.7 | 2022-12-16 | In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with System execution… |
CVE-2022-20562 | Low | 3.3 | 2022-12-16 | In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to… |
CVE-2022-20561 | High | 7.8 | 2022-12-16 | In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2022-20560 | High | 7.5 | 2022-12-16 | Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A |
CVE-2022-20559 | Low | 3.3 | 2022-12-16 | In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to si… |
CVE-2022-20558 | Low | 3.3 | 2022-12-16 | In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to loc… |
CVE-2022-20557 | Medium | 6.7 | 2022-12-16 | In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2022-20556 | Low | 3.3 | 2022-12-16 | In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing permis… |
CVE-2022-20555 | Medium | 4.4 | 2022-12-16 | In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2022-20554 | Medium | 6.7 | 2022-12-16 | In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System… |
CVE-2022-20553 | Medium | 6.5 | 2022-12-16 | In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack. This could lead to local… |
CVE-2022-20552 | Medium | 5.5 | 2022-12-16 | In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information disc… |
CVE-2022-20550 | High | 7.8 | 2022-12-16 | In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privile… |
CVE-2022-20549 | Medium | 6.7 | 2022-12-16 | In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv… |
CVE-2022-20548 | High | 7.8 | 2022-12-16 | In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privil… |
CVE-2022-20547 | High | 7.8 | 2022-12-16 | In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing permission check. This could lead to local… |
CVE-2022-20546 | Medium | 6.7 | 2022-12-16 | In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2022-20545 | High | 7.5 | 2022-12-16 | In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation. This could lead to remote denia… |
CVE-2022-20544 | Medium | 4.4 | 2022-12-16 | In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lea… |
CVE-2022-20543 | Low | 2.3 | 2022-12-16 | In multiple locations, there is a possible display crash loop due to improper input validation. This could lead to local denial of service with system executio… |
CVE-2022-20541 | Medium | 4.2 | 2022-12-16 | In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2022-20540 | High | 7.8 | 2022-12-16 | In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalation of pri… |
CVE-2022-20539 | Medium | 6.7 | 2022-12-16 | In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the… |
CVE-2022-20538 | Medium | 5.5 | 2022-12-16 | In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel infor… |
CVE-2022-20537 | Low | 3.3 | 2022-12-16 | In createDialog of WifiScanModeActivity.java, there is a possible way for a Guest user to enable location-sensitive settings due to a missing permission check… |
CVE-2022-20536 | Low | 3.3 | 2022-12-16 | In registerBroadcastReceiver of RcsService.java, there is a possible way to change preferred TTY mode due to a missing permission check. This could lead to loc… |
CVE-2022-20535 | Low | 3.3 | 2022-12-16 | In registerLocalOnlyHotspotSoftApCallback of WifiManager.java, there is a possible way to determine whether an app is installed, without query permissions, due… |
CVE-2022-20533 | Low | 3.3 | 2022-12-16 | In getSlice of WifiSlice.java, there is a possible way to connect a new WiFi network from the guest mode due to a missing permission check. This could lead to… |
CVE-2022-20531 | Medium | 5.5 | 2022-12-16 | In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could… |
CVE-2022-20530 | Medium | 5.3 | 2022-12-16 | In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information disclosure of call logs with no additio… |
CVE-2022-20529 | Low | 2.4 | 2022-12-16 | In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code. This could lead to local esca… |
CVE-2022-20528 | Low | 3.3 | 2022-12-16 | In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no ad… |
CVE-2022-20527 | Medium | 5.5 | 2022-12-16 | In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from th… |
CVE-2022-20526 | Low | 3.3 | 2022-12-16 | In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… |
CVE-2022-20525 | Low | 3.3 | 2022-12-16 | In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of visual voicemail package name due to a permissions bypass. This cou… |
CVE-2022-20524 | High | 7.8 | 2022-12-16 | In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no addi… |