Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md
CVE ID: CVE-2022-42490 State: PUBLISHED Published: 2023-01-26T21:24:34.744Z Last Updated: 2025-11-04T19:14:07.761Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siretta Products: QUARTZ-GOLD Problem Types: CWE-78 Description: Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is reachable through the m2m's DOWNLOAD_CFG_FILE command Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
's DOWNLOAD_CFG_FILE command Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1640
CVE ID: CVE-2022-42491 State: PUBLISHED Published: 2023-01-26T21:24:34.886Z Last Updated: 2025-11-04T19:14:08.851Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siretta Products: QUARTZ-GOLD Problem Types: CWE-78 Description: Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is reachable through the m2m's M2M_CONFIG_SET command Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
's M2M_CONFIG_SET command Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1640
CVE ID: CVE-2022-42492 State: PUBLISHED Published: 2023-01-26T21:24:35.021Z Last Updated: 2025-11-04T19:14:09.936Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siretta Products: QUARTZ-GOLD Problem Types: CWE-78 Description: Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is reachable through the m2m's DOWNLOAD_AD command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
's DOWNLOAD_AD command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1640
CVE ID: CVE-2022-42493 State: PUBLISHED Published: 2023-01-26T21:24:35.118Z Last Updated: 2025-11-04T19:14:11.059Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siretta Products: QUARTZ-GOLD Problem Types: CWE-78 Description: Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is reachable through the m2m's DOWNLOAD_INFO command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
's DOWNLOAD_INFO command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1640
CVE ID: CVE-2022-42494 State: PUBLISHED Published: 2022-11-08T18:33:32.499Z Last Updated: 2025-02-20T19:54:59.026Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Semper Plugins, LLC Products: All in One SEO Pro (WordPress plugin) Problem Types: CWE-918 Description: Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/all-in-one-seo-pack-pro/wordpress-all-in-one-seo-pro-plugin-4-2-5-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve - https://aioseo.com/changelog/
CVE ID: CVE-2022-42496 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:26:18.566Z Vendors: kujirahand Products: Nako3edit, editor component of nadesiko3 (PC Version) Problem Types: OS Command Injection Description: OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kujirahand/nadesiko3/issues/1325 - https://github.com/kujirahand/nadesiko3/issues/1347 - https://jvn.jp/en/jp/JVN56968681/
jirahand/nadesiko3/issues/1325 - https://github.com/kujirahand/nadesiko3/issues/1347 - https://jvn.jp/en/jp/JVN56968681/index.html
CVE ID: CVE-2022-42497 State: PUBLISHED Published: 2022-11-18T22:12:42.520Z Last Updated: 2025-02-20T19:51:06.874Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: API2Cart Products: Api2Cart Bridge Connector (WordPress plugin) Problem Types: Arbitrary Code Execution Description: Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/api2cart-bridge-connector/wordpress-api2cart-bridge-connector-plugin-1-1-0-arbitrary-code-execution-vulnerability?_s_id=cve - https://wordpress.org/plu
ress-api2cart-bridge-connector-plugin-1-1-0-arbitrary-code-execution-vulnerability?_s_id=cve - https://wordpress.org/plugins/api2cart-bridge-connector/#developers
CVE ID: CVE-2022-42498 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-28T20:13:34.538Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240662453References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-03-01
CVE ID: CVE-2022-42499 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-28T20:14:45.802Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242001391References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-03-01
CVE ID: CVE-2022-42500 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-25T15:03:47.746Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239701389References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-03-01
CVE ID: CVE-2022-42501 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:21:09.093Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241231403References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42502 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:19:59.971Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241231970References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42503 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:20:33.913Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241231983References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bullet
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42504 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:18:54.094Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241232209References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42505 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T20:15:32.370Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241232492References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulle
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42506 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T20:14:31.373Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241388399References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42507 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T20:10:29.028Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241388774References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/
CVE ID: CVE-2022-42508 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T20:09:28.068Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241388966References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-
CVE ID: CVE-2022-42509 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:18:06.757Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241544307References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42510 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:17:15.725Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241762656References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42511 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:16:20.721Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241762712References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42512 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:07:22.904Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In VsimOperationDataExt::encode of vsimdata.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763050References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42513 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T12:47:19.796Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763204References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022
CVE ID: CVE-2022-42514 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T20:08:19.253Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763298References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42515 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T20:07:05.619Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763503References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42516 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T20:05:33.768Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763577References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/p
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42517 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:58:08.749Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763682References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42518 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:44:48.706Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242536278References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42519 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:30:38.469Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242540694References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42520 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:29:48.305Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242994270References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42521 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:28:58.384Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243130019References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42522 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:27:19.106Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243130038References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42523 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:22:11.723Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243376893References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01