CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- google androidIn extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input...5.5 Medium
- google androidIn checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap...6.5 Medium
- google androidIn LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing...5.5 Medium
- google androidIn openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a...7.8 High
- google androidismsEx service is a vendor service in unisoc equipment?ismsEx service is an extension of sms...9.8 Critical
- google androidims_ex is a vendor system service used to manage VoLTE in unisoc devices?But it does not verify...9.1 Critical
- google androidIn clear_data_dlg_text of strings.xml, there is a possible situation when "Clear storage"...5.5 Medium
- google androidIn updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass...7.8 High
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-2046864389.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +69 more +71 morePossible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +47 more +49 morePossible null pointer dereference due to lack of WDOG structure validation during registration in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +39 more +41 morePossible integer overflow due to improper fragment datatype while calculating number of fragments...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +189 more +191 moreImproper validation of data length received from DMA buffer can lead to memory corruption. in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, aqt1000 firmware +98 more +100 moreLack of null check while freeing the device information buffer in the Bluetooth HFP protocol can...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +157 more +159 morePossible out of bound access of DCI resources due to lack of validation process and resource...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +149 more +151 morePossible out of bound write due to lack of boundary check for the maximum size of buffer when...6.7 Medium
- creativityjuice labtoolsLabTools <= 1.0 - Subscriber+ Arbitrary Publication Deletion6.5 Medium