DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday November 2022
view advisory published 2022-11-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.
01
describes (48)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-20460US | medium6.7 | — | ||
In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation. This could lead to local escalation of privilege with System… | ||||
| CVE-2022-20459US | medium6.7 | — | ||
In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead to local escalation of privilege with System execution privi… | ||||
| CVE-2022-33239US | high7.5 | — | ||
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… | ||||
| CVE-2022-33237US | high7.5 | — | ||
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electron… | ||||
| CVE-2022-33236US | high7.5 | — | ||
Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wir… | ||||
| CVE-2022-33234US | critical9.8 | — | ||
Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd… | ||||
| CVE-2022-25743US | high7.8 | — | ||
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdr… | ||||
| CVE-2022-25741US | high7.5 | — | ||
Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… | ||||
| CVE-2022-25724US | high7.8 | — | ||
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna… | ||||
| CVE-2022-25679US | medium5.5 | — | ||
Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapd… | ||||
| CVE-2022-25676US | medium5.5 | — | ||
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag… | ||||
| CVE-2022-25674US | critical9.8 | — | ||
Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music | ||||
| CVE-2022-25671US | high7.5 | — | ||
Denial of service in MODEM due to reachable assertion in Snapdragon Mobile | ||||
| CVE-2022-20465US | medium4.6OT elevated | — | ||
In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic error in the code. This could lead to lo… | ||||
| CVE-2022-20463US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.… | ||||
| CVE-2022-20462US | high7.8 | — | ||
In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no add… | ||||
| CVE-2022-20457US | medium5.5 | — | ||
In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead to local escalation… | ||||
| CVE-2022-20454US | medium6.7 | — | ||
In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges need… | ||||
| CVE-2022-20453US | medium5.5 | — | ||
In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognitio… | ||||
| CVE-2022-20452US | high7.8OT elevated | Exploit | ||
In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege wit… | ||||
showing 20 of 48
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan