CVE-2022-20419
- EPSS 0.02%
- Veröffentlicht 11.10.2022 20:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:46
In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User inter...
CVE-2022-20420
- EPSS 0.02%
- Veröffentlicht 11.10.2022 20:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:46
In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution ...
CVE-2022-20421
- EPSS 5.9%
- Veröffentlicht 11.10.2022 20:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:46
In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...
- EPSS 0.03%
- Veröffentlicht 11.10.2022 20:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:47
In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex...
CVE-2022-20423
- EPSS 0.06%
- Veröffentlicht 11.10.2022 20:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:47
In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious USB device is attached with no additional execution privileges needed. User interact...
CVE-2022-20425
- EPSS 0.03%
- Veröffentlicht 11.10.2022 20:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:47
In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for ex...
CVE-2022-20409
- EPSS 5.61%
- Veröffentlicht 11.10.2022 20:15:11
- Zuletzt bearbeitet 21.11.2024 06:42:45
In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: An...
CVE-2022-20410
- EPSS 0.24%
- Veröffentlicht 11.10.2022 20:15:11
- Zuletzt bearbeitet 21.11.2024 06:42:45
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for ex...
CVE-2022-20412
- EPSS 0.02%
- Veröffentlicht 11.10.2022 20:15:11
- Zuletzt bearbeitet 21.11.2024 06:42:45
In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: Andr...
CVE-2022-20413
- EPSS 0.03%
- Veröffentlicht 11.10.2022 20:15:11
- Zuletzt bearbeitet 21.11.2024 06:42:46
In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitat...