VYPR

android-x86

by Android X86

CVEs (1,425)

  • CVE-2023-21287CriAug 14, 2023
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2023-20965CriAug 14, 2023
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2023-20918CriJul 13, 2023
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2023-21130CriJun 15, 2023
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2021-0877CriMay 15, 2023
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Product: AndroidVersions: Android SoCAndroid ID: A-273754094

  • CVE-2023-20951CriMar 24, 2023
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

  • CVE-2022-20391CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000

  • CVE-2022-20390CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002

  • CVE-2022-20389CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004

  • CVE-2022-20388CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323

  • CVE-2022-20387CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324

  • CVE-2022-20386CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328

  • CVE-2022-20385CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is GSCAN_MAX), then it access polciy array 'policy[type]', which OOB access happens.Product: AndroidVersions: Android…

  • CVE-2021-0942CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]);With the current PoC this crashes as an OOB read.…

  • CVE-2022-20122CriAug 24, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid…

  • CVE-2021-39815CriAug 24, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid…

  • CVE-2022-20239CriAug 10, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions:…

  • CVE-2022-20238CriJul 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions:…

  • CVE-2022-20216CriJul 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com.sprd.firewall has set exported as true.Product: AndroidVersions: Android SoCAndroid ID: A-231911916

  • CVE-2022-20210CriJun 15, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.04

    The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which…

Page 2 of 72