deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-27194
Published: 2022-04-12
Description: A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf
CVE: CVE-2022-27241
Published: 2022-04-12
Description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). Applications built with an affected system publicly expose the internal project structure. This could allow an unauthenticated remote attacker to read confidential information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-414513.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-414513.pdf
CVE: CVE-2022-27480
Published: 2022-04-12
Description: A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require an user to be authenticated to access certain files. This could allow unauthenticated attackers to download these files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-425
References: http://packetstormsecurity.com/files/166743/Siemens-A8000-CP-8050-CP-8031-SICAM-WEB-Missing-File-Download-Missing-Authentication.html; http://seclists.org/fulldisclosure/2022/Apr/20; https://cert-portal.siemens.com/productcert/pdf/ssa-316850.pdf
CVE: CVE-2022-27481
Published: 2022-04-12
Description: A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle resources of ARP requests. This could allow an attacker to cause a race condition that leads to a crash of the entire device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://cert-portal.siemens.com/productcert/pdf/ssa-392912.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-392912.pdf
CVE: CVE-2022-28328
Published: 2022-04-12
Description: A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed Multicast LLC frames. This could allow an attacker to trigger a denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-392912.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-392912.pdf
CVE: CVE-2022-28329
Published: 2022-04-12
Description: A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed TCP packets received over the RemoteCapture feature. This could allow an attacker to lead to a denial of service condition which only affects the port used by the RemoteCapture feature.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-392912.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-392912.pdf
CVE: CVE-2022-28661
Published: 2022-04-12
Description: A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15114)
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-998762.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-998762.pdf
CVE: CVE-2022-28662
Published: 2022-04-12
Description: A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted .NEU files. This could allow an attacker to leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15307)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-998762.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-998762.pdf
CVE: CVE-2022-28663
Published: 2022-04-12
Description: A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15592)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-998762.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-998762.pdf
CVE: CVE-2022-0140
Published: 2022-04-12
Description: The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://wpscan.com/vulnerability/9fa2b3b6-2fe3-40f0-8f71-371dd58fe336; https://www.fortiguard.com/zeroday/FG-VD-21-082; https://wpscan.com/vulnerability/9fa2b3b6-2fe3-40f0-8f71-371dd58fe336
CVE: CVE-2022-0141
Published: 2022-04-12
Description: The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or editor delete and restore arbitrary form entries via CSRF attacks
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/2adc8390-bb19-4adf-9805-e9c462d14d22; https://www.fortiguard.com/zeroday/FG-VD-21-081; https://wpscan.com/vulnerability/2adc8390-bb19-4adf-9805-e9c462d14d22
CVE: CVE-2022-0142
Published: 2022-04-12
Description: The Visual Form Builder WordPress plugin before 3.0.8 is vulnerable to CSV injection allowing a user with low level or no privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236, CWE-1236
References: https://wpscan.com/vulnerability/03[PII_REDACTED]-40c0-9508-39d168087878; https://www.fortiguard.com/zeroday/FG-VD-21-080; https://wpscan.com/vulnerability/03[PII_REDACTED]-40c0-9508-39d168087878
CVE: CVE-2022-0878
Published: 2022-04-12
Description: Electric Vehicle (EV) commonly utilises the Combined Charging System (CCS) for DC rapid charging. To exchange important messages such as the State of Charge (SoC) with the Electric Vehicle Supply Equipment (EVSE) CCS uses a high-bandwidth IP link provided by the HomePlug Green PHY (HPGP) power-line communication (PLC) technology. The attack interrupts necessary control communication between the vehicle and charger, causing charging sessions to abort. The attack can be conducted wirelessly from a distance using electromagnetic interference, allowing individual vehicles or entire fleets to be disrupted simultaneously. In addition, the attack can be mounted with off-the-shelf radio hardware and minimal technical knowledge. With a power budget of 1 W, the attack is successful from around 47 m distance. The exploited behavior is a required part of the HomePlug Green PHY, DIN 70121 & ISO 15118 standards and all known implementations exhibit it. In addition to electric cars, Brokenwire affects electric ships, airplanes and heavy duty vehicles utilising these standards.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://www.brokenwire.fail/; https://www.brokenwire.fail/
CVE: CVE-2022-24247
Published: 2022-04-12
Description: RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to overwrite any file in the web root (along with any other file on the server that the PHP process user has the proper permissions to write) resulting a remote code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.exploit-db.com/exploits/50614; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2022-24248
Published: 2022-04-12
Description: RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to delete any file in the web root (along with any other file on the server that the PHP process user has the proper permissions to delete). Furthermore, an attacker might leverage the capability of arbitrary file deletion to circumvent certain web server security mechanisms such as deleting .htaccess file that would deactivate those security constraints.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://en.0day.today/exploit/description/37177; https://www.exploit-db.com/exploits/50615; https://en.0day.today/exploit/description/37177
CVE: CVE-2021-32040
Published: 2022-04-12
Description: It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.

Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://jira.mongodb.org/browse/SERVER-58203; https://jira.mongodb.org/browse/SERVER-59299; https://jira.mongodb.org/browse/SERVER-60218
CVE: CVE-2021-31805
Published: 2022-04-12
Description: The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code Execution and security degradation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-917, CWE-917
References: http://www.openwall.com/lists/oss-security/2022/04/12/6; https://cwiki.apache.org/confluence/display/WW/S2-062; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-42255
Published: 2022-04-12
Description: AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0022/MNDT-2022-0022.md; https://www.beyondtrust.com/blog; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0022/MNDT-2022-0022.md
CVE: CVE-2022-21803
Published: 2022-04-12
Description: This affects the package nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set() function, that is responsible for setting the configuration properties, is vulnerable to Prototype Pollution. By providing a crafted property, it is possible to modify the properties on the Object.prototype.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/indexzero/nconf/pull/397; https://github.com/indexzero/nconf/releases/tag/v0.11.4; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2632450
CVE: CVE-2022-27161
Published: 2022-04-12
Description: Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cskaza/cszcms/issues/43; https://github.com/cskaza/cszcms/issues/43
CVE: CVE-2022-27162
Published: 2022-04-12
Description: CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cskaza/cszcms/issues/44; https://github.com/cskaza/cszcms/issues/44
CVE: CVE-2022-27163
Published: 2022-04-12
Description: CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cskaza/cszcms/issues/45; https://github.com/cskaza/cszcms/issues/45
CVE: CVE-2022-27164
Published: 2022-04-12
Description: CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cskaza/cszcms/issues/42; https://github.com/cskaza/cszcms/issues/42
CVE: CVE-2022-27165
Published: 2022-04-12
Description: CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cskaza/cszcms/issues/41; https://github.com/cskaza/cszcms/issues/41
CVE: CVE-2022-27472
Published: 2022-04-12
Description: SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Hyperkopite/Roothub_vulns/blob/main/SQLi.md; https://github.com/miansen/Roothub/tree/v2.6; https://github.com/Hyperkopite/Roothub_vulns/blob/main/SQLi.md
CVE: CVE-2022-27473
Published: 2022-04-12
Description: SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Hyperkopite/Roothub_vulns/blob/main/SQLi.md; https://github.com/miansen/Roothub/tree/v2.6; https://github.com/Hyperkopite/Roothub_vulns/blob/main/SQLi.md
CVE: CVE-2022-27902
Published: 2022-04-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-1215. Reason: This issue was MERGED into CVE-2022-1215 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should reference CVE-2022-1215 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-28032
Published: 2022-04-12
Description: AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/thedigicraft/Atom.CMS/issues/263; https://github.com/thedigicraft/Atom.CMS/issues/263
CVE: CVE-2022-28033
Published: 2022-04-12
Description: Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/thedigicraft/Atom.CMS/issues/259; https://github.com/thedigicraft/Atom.CMS/issues/259
CVE: CVE-2022-28034
Published: 2022-04-12
Description: AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/thedigicraft/Atom.CMS/issues/261; https://github.com/thedigicraft/Atom.CMS/issues/261
CVE: CVE-2022-28035
Published: 2022-04-12
Description: Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/thedigicraft/Atom.CMS/issues/260; https://github.com/thedigicraft/Atom.CMS/issues/260
CVE: CVE-2022-28036
Published: 2022-04-12
Description: AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/thedigicraft/Atom.CMS/issues/262; https://github.com/thedigicraft/Atom.CMS/issues/262
CVE: CVE-2021-0694
Published: 2022-04-12
Description: In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissions due to insufficient background restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-183147114
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-0707
Published: 2022-04-12
Description: In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-36914
Published: 2022-04-12
Description: Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) in CalderaWP License Manager (WordPress plugin) <= 1.2.11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-352
References: https://github.com/CalderaWP/calderawp-license-manager; https://patchstack.com/database/vulnerability/calderawp-license-manager/wordpress-calderawp-license-manager-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability-leading-to-reflected-cross-site-scripting-xss; https://github.com/CalderaWP/calderawp-license-manager
CVE: CVE-2021-39794
Published: 2022-04-12
Description: In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-205836329
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39795
Published: 2022-04-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Pulled from Android ASB#2022-04 publication (https://source.android.com/security/bulletin/2022-04-01) due to a functional regression. We will re-release this CVE at a future date, in a future publication that is currently TB
CVE: CVE-2021-39796
Published: 2022-04-12
Description: In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-205595291
CVSS Score: 7.3 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39797
Published: 2022-04-12
Description: In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-209607104
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39798
Published: 2022-04-12
Description: In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213169612
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39799
Published: 2022-04-12
Description: In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-200288596
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39800
Published: 2022-04-12
Description: In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208277166References: Upstream kernel
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39801
Published: 2022-04-12
Description: In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-209791720References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39802
Published: 2022-04-12
Description: In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-213339151References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39803
Published: 2022-04-12
Description: In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-193790350
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01