VYPR

android-x86

by Android X86

CVEs (1,228)

  • CVE-2022-20389CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004

  • CVE-2022-20388CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323

  • CVE-2022-20387CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324

  • CVE-2022-20386CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328

  • CVE-2022-20385CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is GSCAN_MAX), then it access polciy array 'policy[type]', which OOB access happens.Product: AndroidVersions: Android…

  • CVE-2021-0942CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]);With the current PoC this crashes as an OOB read.…

  • CVE-2022-20122CriAug 24, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid…

  • CVE-2021-39815CriAug 24, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid…

  • CVE-2022-20239CriAug 10, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions:…

  • CVE-2022-20238CriJul 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions:…

  • CVE-2022-20216CriJul 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com.sprd.firewall has set exported as true.Product: AndroidVersions: Android SoCAndroid ID: A-231911916

  • CVE-2022-20210CriJun 15, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.04

    The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which…

  • CVE-2022-20130CriJun 15, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.09

    In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2022-20127CriJun 15, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.07

    In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10…

  • CVE-2021-39708CriMar 16, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2021-39616CriFeb 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438

  • CVE-2021-39623CriJan 14, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.02

    In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2021-1049CriJan 14, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722

  • CVE-2021-0324CriJun 14, 2021
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Product: AndroidVersions: Android SoCAndroid ID: A-175402462

  • CVE-2021-0430CriApr 13, 2021
    Google
    Android
    risk 0.64cvss 9.8epss 0.03

    In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution via a malicious NFC packet with no additional execution privileges needed. User interaction is not needed for…

Page 2 of 62