DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday October 2022
view advisory published 2022-10-03
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand zu verursachen.
01
describes (57)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-20424US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.… | ||||
| CVE-2022-33217US | high7.8 | — | ||
Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile | ||||
| CVE-2022-33214US | high7.0 | — | ||
Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… | ||||
| CVE-2022-25749US | high7.5 | — | ||
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electron… | ||||
| CVE-2022-25748US | critical9.8 | — | ||
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… | ||||
| CVE-2022-25736US | high7.5 | — | ||
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer El… | ||||
| CVE-2022-25723US | high7.8 | — | ||
Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile | ||||
| CVE-2022-25720US | critical9.8 | — | ||
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C… | ||||
| CVE-2022-25718US | critical9.8 | — | ||
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connec… | ||||
| CVE-2022-25687US | critical9.8 | — | ||
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indus… | ||||
| CVE-2022-25666US | medium6.7 | — | ||
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indu… | ||||
| CVE-2022-25665US | high7.1 | — | ||
Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile | ||||
| CVE-2022-25664US | medium5.5 | — | ||
Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… | ||||
| CVE-2022-25662US | high7.5 | — | ||
Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria… | ||||
| CVE-2022-25661US | high7.8 | — | ||
Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile | ||||
| CVE-2022-25660US | high7.8 | — | ||
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile | ||||
| CVE-2022-22078US | medium4.6 | — | ||
Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute, Sna… | ||||
| CVE-2022-22077US | high7.8 | Exploit | ||
Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile | ||||
| CVE-2022-20464US | medium5.5 | — | ||
In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information dis… | ||||
| CVE-2022-20397US | high7.8 | — | ||
In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addition… | ||||
showing 20 of 57
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DLA-3173 vom 2022-11-01external
- Android Security Bulletin October 2022 vom 2022-10-03external
- Android Security Bulletin October 2022 vom 2022-10-03external
- Ubuntu Security Notice USN-5877-1 vom 2023-02-16external
- WID-SEC-W-2022-1599 - CSAF Versionself
- WID-SEC-2022-1599 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan