DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday Juni 2022
view advisory published 2022-06-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen und einen Denial-of-Service-Zustand auszulösen.
01
describes (119)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-20233US | medium6.7 | — | ||
In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escal… | ||||
| CVE-2022-20210US | critical9.8 | — | ||
The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the recei… | ||||
| CVE-2022-20209US | high7.5 | — | ||
In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no… | ||||
| CVE-2022-20208US | medium4.4 | — | ||
In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execut… | ||||
| CVE-2022-20207US | high7.8 | — | ||
In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with no ad… | ||||
| CVE-2022-20206US | medium5.5OT elevated | — | ||
In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead to local information disclosure about enabled notification… | ||||
| CVE-2022-20205US | medium5.5 | — | ||
In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation. This could lead to local information disclosure wi… | ||||
| CVE-2022-20204US | high7.8OT elevated | — | ||
In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to… | ||||
| CVE-2022-20202US | medium6.5 | — | ||
In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information d… | ||||
| CVE-2022-20201US | medium6.7 | — | ||
In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execu… | ||||
| CVE-2022-20200US | medium5.5OT elevated | — | ||
In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. This could lead to local information disclosure with no additio… | ||||
| CVE-2022-20198US | medium4.4 | — | ||
In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stac… | ||||
| CVE-2022-20197US | high7.8 | — | ||
In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass. This could lead to local escalation of privilege with n… | ||||
| CVE-2022-20196US | medium5.0 | — | ||
In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges nee… | ||||
| CVE-2022-20195US | medium5.0 | — | ||
In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This could lead to local denial of service with User execution p… | ||||
| CVE-2022-20194US | high7.8 | — | ||
In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User… | ||||
| CVE-2022-20193US | high7.3 | — | ||
In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could lead to local escalati… | ||||
| CVE-2022-20192US | high7.8 | — | ||
In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a permissions bypass. This could lead to… | ||||
| CVE-2022-20191US | critical9.8 | — | ||
Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A | ||||
| CVE-2022-20190US | high7.5 | — | ||
Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A | ||||
showing 20 of 119
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:0412 vom 2024-01-25external
- Amazon Linux Security Advisory ALASKERNEL-5.4-2024-073 vom 2024-06-25external
- SUSE Security Update SUSE-SU-2022:2696-1 vom 2022-08-09external
- SUSE Security Update SUSE-SU-2022:2697-1 vom 2022-08-09external
- SUSE Security Update SUSE-SU-2022:2699-1 vom 2022-08-09external
- SUSE Security Update SUSE-SU-2022:2728-1 vom 2022-08-10external
- SUSE Security Update SUSE-SU-2022:2779-1 vom 2022-08-11external
- SUSE Security Update SUSE-SU-2022:2809-1 vom 2022-08-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan