Skip to contentGoogle Android vulnerabilities
- google androidIn GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape....CVE-2022-20125Fix available6.8 Medium
- google androidIn phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to...CVE-2022-20123Fix available7.5 High
- google androidIn closef of label_backends_android.c, there is a possible way to corrupt memory due to a double...CVE-2021-39806Fix available7.8 High
- google androidIn WindowManager, there is a possible tapjacking attack due to an incorrect window flag when...CVE-2021-39691Fix available7.3 High
- google androidIn CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing...CVE-2021-397387.8 High
- google androidIn several functions of KeyguardServiceWrapper.java and related files,, there is a possible way...CVE-2022-200067.0 High
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6797, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6893, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ion, there is a possible use after free due to an integer overflow. This could lead to local...CVE-2022-217437.8 High
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6797, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6893, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ion, there is a possible use after free due to incorrect error handling. This could lead to...CVE-2022-201118.4 High
- google android, linux kernel, mediatek, inc. mt9011, mt9215, mt9216, mt9220, mt9221, mt9255, mt9256, mt9266, mt9269, mt9285, mt9286, mt9288, mt9600, mt9602, mt9610, mt9611, mt9612, mt9613, mt9615, mt9617, mt9629, mt9630, mt9631, mt9632, mt9636, mt9638, mt9639, mt9650, mt9652, mt9666, mt9669, mt9670, mt9675, mt9685, mt9686, mt9688 +2 moreIn voice service, there is a possible out of bounds write due to a stack-based buffer overflow....CVE-2022-201086.7 Medium
- google android, linux kernel, mediatek, inc. mt9011, mt9215, mt9216, mt9220, mt9221, mt9255, mt9256, mt9266, mt9269, mt9285, mt9286, mt9288, mt9600, mt9602, mt9610, mt9611, mt9612, mt9613, mt9615, mt9617, mt9629, mt9630, mt9631, mt9632, mt9636, mt9638, mt9639, mt9650, mt9652, mt9666, mt9669, mt9670, mt9675, mt9685, mt9686, mt9688 +2 moreIn subtitle service, there is a possible application crash due to an integer overflow. This could...CVE-2022-201074.4 Medium
- google android, linux kernel, mediatek, inc. mt9011, mt9215, mt9216, mt9220, mt9221, mt9255, mt9256, mt9266, mt9269, mt9285, mt9286, mt9288, mt9600, mt9602, mt9610, mt9611, mt9612, mt9613, mt9615, mt9617, mt9629, mt9630, mt9631, mt9632, mt9636, mt9638, mt9639, mt9650, mt9652, mt9666, mt9669, mt9670, mt9675, mt9685, mt9686, mt9688 +2 moreIn MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This...CVE-2022-201066.7 Medium
- google android, linux kernel, mediatek, inc. mt9011, mt9215, mt9216, mt9220, mt9221, mt9255, mt9256, mt9266, mt9269, mt9285, mt9286, mt9288, mt9600, mt9602, mt9610, mt9611, mt9612, mt9613, mt9615, mt9617, mt9629, mt9630, mt9631, mt9632, mt9636, mt9638, mt9639, mt9650, mt9652, mt9666, mt9669, mt9670, mt9675, mt9685, mt9686, mt9688 +2 moreIn MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This...CVE-2022-201056.7 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee daemon, there is a possible information disclosure due to improper access control. This...CVE-2022-201045.5 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee daemon, there is a possible information disclosure due to symbolic link following. This...CVE-2022-201034.4 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee daemon, there is a possible information disclosure due to a missing permission check. This...CVE-2022-201024.4 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee daemon, there is a possible information disclosure due to a path traversal. This could...CVE-2022-201015.5 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee daemon, there is a possible information disclosure due to a missing permission check. This...CVE-2022-201004.4 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee daemon, there is a possible out of bounds write due to improper input validation. This...CVE-2022-200997.8 High
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee daemon, there is a possible information disclosure due to a missing permission check. This...CVE-2022-200984.4 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee daemon, there is a possible information disclosure due to a race condition. This could...CVE-2022-200974.7 Medium
- google android, mediatek, inc. mt6765, mt6768, mt6769, mt8183, mt8185, mt8385, mt8666, mt8667, mt8768, mt8786, mt8788, mt8789 +1 moreIn camera, there is a possible information disclosure due to uninitialized data. This could lead...CVE-2022-200964.4 Medium
- google android, mediatek, inc. mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6885, mt6893, mt8788, mt8797 +1 moreIn imgsensor, there is a possible out of bounds write due to a missing bounds check. This could...CVE-2022-200956.7 Medium
- google android, mediatek, inc. mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6885, mt6893, mt8788, mt8797 +1 moreIn imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This...CVE-2022-200946.7 Medium
- google android, mediatek, inc. mt6731, mt6732, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6752, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8321, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn telephony, there is a possible way to disable receiving SMS messages due to a missing...CVE-2022-200937.8 High
- google android, mediatek, inc. mt6761, mt6768, mt6779, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8173, mt8175, mt8183, mt8185, mt8385, mt8791, mt8797 +1 moreIn alac decoder, there is a possible out of bounds read due to a missing bounds check. This could...CVE-2022-200925.5 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8696, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee driver, there is a possible use after free due to a race condition. This could lead to...CVE-2022-200916.4 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8696, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee driver, there is a possible use after free due to a race condition. This could lead to...CVE-2022-200906.4 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8695, mt8696, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee driver, there is a possible memory corruption due to active debug code. This could lead to...CVE-2022-200896.7 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8696, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee driver, there is a possible reference count mistake due to incorrect error handling. This...CVE-2022-200887.8 High
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6885, mt6893 +1 moreIn ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2022-200876.7 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn netdiag, there is a possible symbolic link following due to an improper link resolution. This...CVE-2022-200856.7 Medium
- google android, samsung mobile devices +1 moreImproper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows...CVE-2022-287884.0 Medium
- google android, samsung mobile devices +1 moreImproper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows...CVE-2022-287874.0 Medium
- google android, samsung mobile devices +1 moreImproper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows...CVE-2022-287864.0 Medium
- google android, samsung mobile devices +1 moreImproper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows...CVE-2022-287854.0 Medium
- google android, samsung mobile devices +1 morePath traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to...CVE-2022-287844.0 Medium
- google android, samsung mobile devices +1 moreImproper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1...CVE-2022-287836.2 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1...CVE-2022-287824.6 Medium
- google android, samsung mobile devices +1 moreImproper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch...CVE-2022-287817.7 High
- google android, samsung mobile devices +1 moreImproper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that...CVE-2022-287805.0 Medium
- google androidIn getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing...CVE-2022-20121Fix available5.5 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/ACVE-2022-20120Public exploitFix available9.8 Critical
- google androidIn private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to...CVE-2022-20119Fix available5.5 Medium
- google androidIn ion_ioctl and related functions of ion.c, there is a possible use after free due to a race...CVE-2022-20118Fix available7.0 High
- google androidIn (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to...CVE-2022-20117Fix available5.5 Medium
- google androidIn onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities...CVE-2022-20116Fix available7.8 High
- google androidIn broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base...CVE-2022-20115Fix available5.5 Medium
- google androidIn placeCall of TelecomManager.java, there is a possible way for an application to keep itself...CVE-2022-20114Fix available7.8 High
- google androidIn mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to...CVE-2022-20113Fix available7.8 High
- google androidIn getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a...CVE-2022-20112Fix available5.5 Medium
- Show moreLoading…