VYPR

Android

by Google

CVEs (8,504)

  • CVE-2022-20094MedMay 3, 2022
    Mediatek
    imgsensor
    risk 0.44cvss 6.7epss 0.00

    In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479763; Issue ID: ALPS06479734.

  • CVE-2022-20089MedMay 3, 2022
    Mediatek
    aee driver
    risk 0.44cvss 6.7epss 0.00

    In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06240397; Issue ID: ALPS06240397.

  • CVE-2022-20087MedMay 3, 2022
    Mediatek
    ccu
    risk 0.44cvss 6.7epss 0.00

    In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06477970; Issue ID: ALPS06477970.

  • CVE-2022-20085MedMay 3, 2022
    Mediatek
    netdiag
    risk 0.44cvss 6.7epss 0.00

    In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06308877; Issue ID: ALPS06308877.

  • CVE-2021-39814MedApr 12, 2022
    Google
    Android
    risk 0.44cvss 6.7epss 0.00

    In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…

  • CVE-2022-20075MedApr 11, 2022
    Mediatek
    ged
    risk 0.44cvss 6.7epss 0.00

    In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05838808.

  • CVE-2022-20072MedApr 11, 2022
    Mediatek
    search engine service
    risk 0.44cvss 6.7epss 0.00

    In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06219118;…

  • CVE-2022-20071MedApr 11, 2022
    Mediatek
    ccu
    risk 0.44cvss 6.7epss 0.00

    In ccu, there is a possible escalation of privilege due to a missing certificate validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06183315; Issue ID: ALPS06183315.

  • CVE-2022-20070MedApr 11, 2022
    Mediatek
    ssmr
    risk 0.44cvss 6.7epss 0.00

    In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06362920; Issue ID: ALPS06362920.

  • CVE-2022-20068MedApr 11, 2022
    Mediatek
    mobile_log_d
    risk 0.44cvss 6.7epss 0.00

    In mobile_log_d, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06308907; Issue ID:…

  • CVE-2022-20067MedApr 11, 2022
    Mediatek
    mdp
    risk 0.44cvss 6.7epss 0.00

    In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836585; Issue ID: ALPS05836585.

  • CVE-2022-20065MedApr 11, 2022
    Mediatek
    ccci
    risk 0.44cvss 6.7epss 0.00

    In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108658; Issue ID: ALPS06108658.

  • CVE-2022-20064MedApr 11, 2022
    Mediatek
    ccci
    risk 0.44cvss 6.7epss 0.00

    In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108617; Issue ID: ALPS06108617.

  • CVE-2022-20062MedApr 11, 2022
    Mediatek
    mdp
    risk 0.44cvss 6.7epss 0.00

    In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836418; Issue ID: ALPS05836418.

  • CVE-2021-39786MedMar 30, 2022
    Google
    Android
    risk 0.44cvss 6.7epss 0.00

    In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-192551247

  • CVE-2021-39736MedMar 16, 2022
    Google
    Android
    risk 0.44cvss 6.7epss 0.00

    In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for…

  • CVE-2021-39733MedMar 16, 2022
    Google
    Android
    risk 0.44cvss 6.7epss 0.00

    In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2021-39731MedMar 16, 2022
    Google
    Android
    risk 0.44cvss 6.7epss 0.00

    In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for…

  • CVE-2021-39729MedMar 16, 2022
    Google
    Android
    risk 0.44cvss 6.7epss 0.00

    In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid…

  • CVE-2021-39725MedMar 16, 2022
    Google
    Android
    risk 0.44cvss 6.7epss 0.00

    In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:…

Page 248 of 426