VYPR

Android

by Google

CVEs (8,504)

  • CVE-2022-20386CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328

  • CVE-2022-20385CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is GSCAN_MAX), then it access polciy array 'policy[type]', which OOB access happens.Product: AndroidVersions: Android…

  • CVE-2021-0942CriSep 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]);With the current PoC this crashes as an OOB read.…

  • CVE-2022-26447CriSep 6, 2022
    Mediatek
    BT firmware
    risk 0.64cvss 9.8epss 0.01

    In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784478; Issue ID: ALPS06784478.

  • CVE-2022-20122CriAug 24, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid…

  • CVE-2021-39815CriAug 24, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid…

  • CVE-2022-20405CriAug 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A

  • CVE-2022-20403CriAug 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A

  • CVE-2022-20402CriAug 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A

  • CVE-2022-20400CriAug 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…

  • CVE-2022-20384CriAug 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A

  • CVE-2022-20381CriAug 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A

  • CVE-2022-20378CriAug 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A

  • CVE-2022-20365CriAug 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A

  • CVE-2022-20237CriAug 11, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

  • CVE-2022-20361CriAug 10, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2022-20239CriAug 10, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions:…

  • CVE-2022-20238CriJul 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions:…

  • CVE-2022-20229CriJul 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.03

    In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2022-20222CriJul 13, 2022
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12…

Page 7 of 426