Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen und einen Denial-of-Service-Zustand auszulösen.
Product
Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 114
-
High 7.8
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…
KEV Jun 2, 2026 -
High 8.8CVE-2021-31440 Public exploit
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …
-
High 8.4
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon A…
-
High 8.4
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Com…
-
High 8.4
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Sn…
-
High 8.4
Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snap…
-
High 8.2
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdrago…
-
High 7.8
Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapd…
-
High 7.5
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectiv…
-
High 7.5
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Comput…
-
High 7.3
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, S…
-
High 7.3
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdr…
-
Medium 6.7
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Co…
-
Medium 6.7
Improper handling between export and release functions on the same handle from client can lead to use after free in Sna…
-
Medium 6.7
An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx d…
-
Medium 5.5
Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Sna…
-
Unscored —
The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence w…
-
Unscored —
In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of information about ins…
-
Unscored —
An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user…
-
Unscored —
A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in …
-
Unscored —
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via…
-
Unscored —
A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_A…
-
Unscored —
A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the…
-
Unscored —
An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sa…
-
Unscored —
A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of b…
-
Unscored —
In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untr…
-
Unscored —
In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local…
-
Unscored —
In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. Thi…
-
Unscored —
In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. Thi…
-
Unscored —
In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead …
-
Unscored —CVE-2021-4154 Public exploit
A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 par…
-
Unscored —CVE-2021-44733 Public exploit
A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs …
-
Unscored —
In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's …
-
Unscored —
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds chec…
-
Unscored —
In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded application…
-
Unscored —
In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to loca…
-
Unscored —CVE-2022-20126 Public exploit
In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interact…
-
Unscored —
In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to rem…
-
Unscored —
In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a pho…
-
Unscored —CVE-2022-20130 Public exploit
In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow…
-
Unscored —
In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. Thi…
-
Unscored —
In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to im…
-
Unscored —
In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permi…
-
Unscored —
In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number du…
-
Unscored —
In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escal…
-
Unscored —
In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi sett…
-
Unscored —CVE-2022-20138 Public exploit
In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app …
-
Unscored —CVE-2022-20140 Public exploit
In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l…
-
Unscored —
In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local esca…
-
Unscored —CVE-2022-20142 Public exploit
In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parc…
-
Unscored —
In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustio…
-
Unscored —
In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content prov…
-
Unscored —
In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrad…
-
Unscored —
In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This c…
-
Unscored —
In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. Th…
-
Unscored —
In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privi…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A
-
Unscored —
In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc…
-
Unscored —
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead t…
-
Unscored —
In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local esc…
-
Unscored —
In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due…
-
Unscored —
In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This …
-
Unscored —
In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect boun…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A
-
Unscored —
In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could …
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A
-
Unscored —
In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to lo…
-
Unscored —
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This …
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A
-
Unscored —
In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A
-
Unscored —
In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This co…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A
-
Unscored —
In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This c…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A
-
Unscored —
In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A
-
Unscored —
In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing …
-
Unscored —
In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. T…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A
-
Unscored —
In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System exe…
-
Unscored —CVE-2022-20186 Public exploit
In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input valida…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A
-
Unscored —
In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedd…
-
Unscored —
In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to…
-
Unscored —
In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of pr…
-
Unscored —
In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. Thi…
-
Unscored —
In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local infor…
-
Unscored —
In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions by…
-
Unscored —
In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This…
-
Unscored —
In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. Th…
-
Unscored —
In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This …
-
Unscored —
In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a …
-
Unscored —
In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug …
-
Unscored —
In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input v…
-
Unscored —
In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lea…
-
Unscored —
In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value…
-
Unscored —
In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This …
-
Unscored —
In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overf…
-
Unscored —
The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the mod…
-
Unscored —
In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due…
-
Unscored —
In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation o…
-
Unscored —CVE-2022-23222 Public exploit
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availabi…
-
Unscored —
drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.
-
Unscored —CVE-2022-25258 Public exploit
An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem …
-
Unscored —
An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensiti…
Revision history
-
#13
Neue Updates von Amazon aufgenommen
-
#12
Neue Updates von SUSE aufgenommen
-
#11
Neue Updates von SUSE aufgenommen
-
#10
Neue Updates von Red Hat aufgenommen
-
#9
Neue Updates von SUSE aufgenommen
-
#8
Neue Updates von SUSE aufgenommen
-
#7
Neue Updates von SUSE aufgenommen
-
#6
Neue Updates von SUSE aufgenommen
-
#5
Neue Updates von SUSE aufgenommen
-
#4
Neue Updates von SUSE aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von SUSE aufgenommen
-
#1
Initiale Fassung
References
-
Android Security Advisory vom 2022-06-06
https://source.android.com/security/bulletin/2022-06-01
-
Pixel Security Advisory vom 2022-06-06
https://source.android.com/security/bulletin/pixel/2022-06-01
-
SUSE Security Update SUSE-SU-2022:2423-1 vom 2022-07-18
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011576.html
-
SUSE Security Update SUSE-SU-2022:2422-1 vom 2022-07-18
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011579.html
-
SUSE Security Update SUSE-SU-2022:2443-1 vom 2022-07-20
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011597.html
-
SUSE Security Update SUSE-SU-2022:2435-1 vom 2022-07-19
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011594.html
-
SUSE Security Update SUSE-SU-2022:2445-1 vom 2022-07-20
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011599.html
-
SUSE Security Update SUSE-SU-2022:2460-1 vom 2022-07-20
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011608.html
-
SUSE Security Update SUSE-SU-2022:2461-1 vom 2022-07-21
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011609.html
-
SUSE Security Update SUSE-SU-2022:2516-1 vom 2022-07-21
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011614.html
-
SUSE Security Update SUSE-SU-2022:2515-1 vom 2022-07-21
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011613.html
-
SUSE Security Update SUSE-SU-2022:2697-1 vom 2022-08-09
https://lists.suse.com/pipermail/sle-security-updates/2022-August/011824.html
-
SUSE Security Update SUSE-SU-2022:2696-1 vom 2022-08-09
https://lists.suse.com/pipermail/sle-security-updates/2022-August/011823.html
-
SUSE Security Update SUSE-SU-2022:2699-1 vom 2022-08-09
https://lists.suse.com/pipermail/sle-security-updates/2022-August/011825.html
-
SUSE Security Update SUSE-SU-2022:2728-1 vom 2022-08-10
https://lists.suse.com/pipermail/sle-security-updates/2022-August/011840.html
-
SUSE Security Update SUSE-SU-2022:2779-1 vom 2022-08-11
https://lists.suse.com/pipermail/sle-security-updates/2022-August/011894.html
-
SUSE Security Update SUSE-SU-2022:2809-1 vom 2022-08-16
https://lists.suse.com/pipermail/sle-security-updates/2022-August/011914.html
-
Red Hat Security Advisory RHSA-2024:0412 vom 2024-01-25
https://access.redhat.com/errata/RHSA-2024:0412
-
SUSE Security Update SUSE-SU-2024:0856-1 vom 2024-03-13
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018155.html
-
SUSE Security Update SUSE-SU-2024:2010-1 vom 2024-06-12
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018711.html
-
Amazon Linux Security Advisory ALASKERNEL-5.4-2024-073 vom 2024-06-25
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2024-073.html