Google ≫ Android

8158 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

3.3

CVE-2022-39850

EPSS 0.08%
Veröffentlicht 07.10.2022 15:15:18
Zuletzt bearbeitet 21.11.2024 07:18:23

Improper access control in mum_container_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data.

3.3

CVE-2022-36868

EPSS 0.12%
Veröffentlicht 07.10.2022 15:15:16
Zuletzt bearbeitet 21.11.2024 07:13:55

Improper restriction of broadcasting Intent in MouseNKeyHidDevice prior to SMR Oct-2022 Release 1 leaks MAC address of the connected Bluetooth device.

6.7

CVE-2022-20231

EPSS 0.11%
Veröffentlicht 14.09.2022 16:15:10
Zuletzt bearbeitet 21.11.2024 06:42:24

In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....

7.8

CVE-2022-20364

EPSS 0.11%
Veröffentlicht 14.09.2022 16:15:10
Zuletzt bearbeitet 21.11.2024 06:42:39

In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: A...

7.8

CVE-2021-0943

EPSS 0.1%
Veröffentlicht 13.09.2022 20:15:09
Zuletzt bearbeitet 21.11.2024 05:43:17

In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product...

9.8

CVE-2022-20385

EPSS 0.37%
Veröffentlicht 13.09.2022 20:15:09
Zuletzt bearbeitet 21.11.2024 06:42:43

a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is GSCAN_MAX), then it access polciy array 'policy[type]', which OOB access happens.Product: A...

9.8