Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand zu verursachen.
Product
Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 56
-
Critical 9.8
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Comput…
-
Critical 9.8
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snap…
-
Critical 9.1
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Sn…
-
High 8.4CVE-2022-22077 Public exploit
Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile
-
High 8.4
Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Con…
-
High 8.4
Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile
-
High 8.4
Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon …
-
High 7.8
In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc…
-
High 7.8
In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This…
-
High 7.8
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, S…
-
High 7.8
Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication wi…
-
High 7.5
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdr…
-
High 7.5
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon C…
-
High 7.3
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapd…
-
Medium 6.8
Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO…
-
Medium 6.7
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto,…
-
Medium 6.2
Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, …
-
Medium 5.5
In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logi…
-
Medium 5.3
Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdrago…
-
Medium 4.6
Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when bloc…
-
Unscored —
In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local …
-
Unscored —
In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lea…
-
Unscored —
In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local…
-
Unscored —
In WindowManager, there is a possible way to start a foreground activity from the background due to a missing permissio…
-
Unscored —
In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This co…
-
Unscored —
In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. Thi…
-
Unscored —
In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local…
-
Unscored —
In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when anoth…
-
Unscored —CVE-2022-20409 Public exploit
In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to…
-
Unscored —
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. Thi…
-
Unscored —
In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to l…
-
Unscored —CVE-2022-20413 Public exploit
In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. …
-
Unscored —
In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction o…
-
Unscored —
In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Thi…
-
Unscored —
In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Thi…
-
Unscored —
In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could …
-
Unscored —
In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a l…
-
Unscored —
In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device p…
-
Unscored —CVE-2022-20421 Public exploit
In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could l…
-
Unscored —
In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. Thi…
-
Unscored —
In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead t…
-
Unscored —CVE-2022-20424 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —
In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource …
-
Unscored —
There is an missing authorization issue in the system service. Since the component does not have permission check , res…
-
Unscored —
There is an missing authorization issue in the system service. Since the component does not have permission check , res…
-
Unscored —
There is an missing authorization issue in the system service. Since the component does not have permission check and p…
-
Unscored —
There is an missing authorization issue in the system service. Since the component does not have permission check , res…
-
Unscored —
There is an missing authorization issue in the system service. Since the component does not have permission check , res…
-
Unscored —
There is a Unauthorized service in the system service, may cause the system reboot. Since the component does not have p…
-
Unscored —
There is an unauthorized service in the system service. Since the component does not have permission check, resulting i…
-
Unscored —
In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Androi…
-
Unscored —
In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Androi…
-
Unscored —
In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android…
-
Unscored —
In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Androi…
-
Unscored —
In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local esc…
-
Unscored —
In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalatio…
Revision history
-
#3
Neue Updates von Ubuntu aufgenommen
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Ubuntu Security Notice USN-5877-1 vom 2023-02-16
https://ubuntu.com/security/notices/USN-5877-1
-
Android Security Bulletin October 2022 vom 2022-10-03
https://source.android.com/docs/security/bulletin/2022-10-01
-
Android Security Bulletin October 2022 vom 2022-10-03
https://source.android.com/docs/security/bulletin/pixel/2022-10-01
-
Debian Security Advisory DLA-3173 vom 2022-11-01
https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html