VYPR

Android

by Google

CVEs (8,720)

  • CVE-2022-20033MedFeb 9, 2022
    Mediatek
    camera driver
    risk 0.29cvss 4.4epss 0.00

    In camera driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862973; Issue ID: ALPS05862973.

  • CVE-2022-20029MedFeb 9, 2022
    Mediatek
    cmdq driver
    risk 0.29cvss 4.4epss 0.00

    In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05747150; Issue ID: ALPS05747150.

  • CVE-2021-39680MedJan 14, 2022
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

  • CVE-2022-22270MedJan 10, 2022
    Samsung Mobile
    Dialer
    risk 0.29cvss 4.4epss 0.00

    An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information.

  • CVE-2022-20018MedJan 4, 2022
    Mediatek
    seninf driver
    risk 0.29cvss 4.4epss 0.00

    In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05863018; Issue ID: ALPS05863018.

  • CVE-2022-20015MedJan 4, 2022
    Mediatek
    kd_camera_hw driver
    risk 0.29cvss 4.4epss 0.00

    In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966.

  • CVE-2021-0902MedDec 17, 2021
    Apusys
    apusys
    risk 0.29cvss 4.4epss 0.00

    In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05656484.

  • CVE-2021-0900MedDec 17, 2021
    Apusys
    apusys
    risk 0.29cvss 4.4epss 0.00

    In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672055.

  • CVE-2021-0677MedDec 17, 2021
    Mediatek
    ccu driver
    risk 0.29cvss 4.4epss 0.00

    In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827154; Issue ID: ALPS05827154.

  • CVE-2021-0676MedDec 17, 2021
    Mediatek
    geniezone driver
    risk 0.29cvss 4.4epss 0.00

    In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05863009; Issue ID: ALPS05863009.

  • CVE-2021-39657MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

  • CVE-2021-39647MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization of TEE due to improper locking. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for…

  • CVE-2021-39637MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2021-39636MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2021-1047MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In valid_ipc_dram_addr of cm_access_control.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

  • CVE-2021-1046MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2021-1042MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2021-1008MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for…

  • CVE-2021-1007MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

  • CVE-2021-1006MedDec 15, 2021
    Google
    Android
    risk 0.29cvss 4.4epss 0.00

    In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:…

Page 403 of 436