CVE-2022-20481
- EPSS 0.02%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.03.2025 16:15:14
In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Produ...
CVE-2022-20551
- EPSS 0.02%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.03.2025 16:15:14
In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no...
CVE-2023-20932
- EPSS 0.02%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.03.2025 16:15:16
In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User ...
CVE-2023-20933
- EPSS 0.02%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.03.2025 18:15:30
In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...
CVE-2023-20934
- EPSS 0%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.03.2025 18:15:30
In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. Use...
CVE-2023-20937
- EPSS 0.05%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.03.2025 18:15:30
In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e...
CVE-2023-20938
- EPSS 0.18%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.11.2024 07:41:51
In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2023-20939
- EPSS 0.02%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.03.2025 18:15:31
In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed ...
CVE-2023-20940
- EPSS 0.01%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.03.2025 18:15:31
In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex...
CVE-2023-20943
- EPSS 0.02%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.03.2025 19:15:42
In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not ...