DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday Dezember 2022
view advisory published 2022-12-05
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.
01
describes (227)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-20565US | — | — | ||
Уязвимость функции hid_output_report() в модуле drivers/hid/hid-core.c драйвере HID ядра операционной системы Linux связана с некорректным вычислением размера буфера. Эксплуатация… | ||||
| CVE-2022-20499US | medium5.5 | — | ||
In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no additional execution… | ||||
| CVE-2022-42542US | medium6.7 | — | ||
In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Syst… | ||||
| CVE-2022-42535US | medium5.5 | — | ||
In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privile… | ||||
| CVE-2022-42534US | high7.8 | — | ||
In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could lead to local escalation of privilege with n… | ||||
| CVE-2022-42532US | medium4.4 | — | ||
In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. Us… | ||||
| CVE-2022-42531US | high7.8 | — | ||
In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of privilege with no additional… | ||||
| CVE-2022-42530US | medium4.4 | — | ||
In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. Us… | ||||
| CVE-2022-42529US | critical9.8 | — | ||
Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A | ||||
| CVE-2022-42527US | high7.5 | — | ||
In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed.… | ||||
| CVE-2022-42526US | medium6.7 | — | ||
In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exe… | ||||
| CVE-2022-42525US | medium6.7 | — | ||
In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege wit… | ||||
| CVE-2022-42524US | high7.5 | — | ||
In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execu… | ||||
| CVE-2022-42523US | medium6.7 | — | ||
In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege wit… | ||||
| CVE-2022-42522US | medium4.4 | — | ||
In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execu… | ||||
| CVE-2022-42521US | medium6.7 | — | ||
In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileg… | ||||
| CVE-2022-42520US | medium6.7 | — | ||
In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges ne… | ||||
| CVE-2022-42519US | medium6.7 | — | ||
In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege wit… | ||||
| CVE-2022-42518US | medium6.7 | — | ||
In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi… | ||||
| CVE-2022-42517US | medium4.4 | — | ||
In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System… | ||||
showing 20 of 227
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan