deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20543
Published: 2022-12-16
Description: In multiple locations, there is a possible display crash loop due to improper input validation. This could lead to local denial of service with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238178261
CVSS Score: 2.3 (LOW)
CWE: CWE-1284, CWE-1284
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20544
Published: 2022-12-16
Description: In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238745070
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20545
Published: 2022-12-16
Description: In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-239368697
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20546
Published: 2022-12-16
Description: In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240266798
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20547
Published: 2022-12-16
Description: In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240301753
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20548
Published: 2022-12-16
Description: In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240919398
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20549
Published: 2022-12-16
Description: In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242702451
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20550
Published: 2022-12-16
Description: In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242845514
CVSS Score: 7.8 (HIGH)
CWE: CWE-610
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20552
Published: 2022-12-16
Description: In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-243922806
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20553
Published: 2022-12-16
Description: In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244155265
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20554
Published: 2022-12-16
Description: In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245770596
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20555
Published: 2022-12-16
Description: In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246194233
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20556
Published: 2022-12-16
Description: In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246301667
CVSS Score: 3.3 (LOW)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20557
Published: 2022-12-16
Description: In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-247092734
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20558
Published: 2022-12-16
Description: In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236264289
CVSS Score: 3.3 (LOW)
CWE: CWE-863
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20559
Published: 2022-12-16
Description: In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-219739967
CVSS Score: 3.3 (LOW)
CWE: CWE-203, CWE-203
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20560
Published: 2022-12-16
Description: Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20561
Published: 2022-12-16
Description: In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222162870References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20562
Published: 2022-12-16
Description: In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231630423References: N/A
CVSS Score: 3.3 (LOW)
CWE: CWE-693
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20563
Published: 2022-12-16
Description: In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242067561References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20564
Published: 2022-12-16
Description: In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243798789References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20566
Published: 2022-12-16
Description: In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667, CWE-416, CWE-667
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20567
Published: 2022-12-16
Description: In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186777253References: Upstream kernel
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20568
Published: 2022-12-16
Description: In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-220738351References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20569
Published: 2022-12-16
Description: In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-229258234References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20570
Published: 2022-12-16
Description: Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20571
Published: 2022-12-16
Description: In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234030265References: Upstream kernel
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20572
Published: 2022-12-16
Description: In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20574
Published: 2022-12-16
Description: In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237582191References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20575
Published: 2022-12-16
Description: In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237585040References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20576
Published: 2022-12-16
Description: In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239701761References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20577
Published: 2022-12-16
Description: In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241762281References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20578
Published: 2022-12-16
Description: In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243509749References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20579
Published: 2022-12-16
Description: In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243510139References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20580
Published: 2022-12-16
Description: In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243629453References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20581
Published: 2022-12-16
Description: In the Pixel camera driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-245916120References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20582
Published: 2022-12-16
Description: In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-233645166References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20583
Published: 2022-12-16
Description: In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in S-EL1 with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234859169References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20584
Published: 2022-12-16
Description: In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238366009References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20585
Published: 2022-12-16
Description: In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238716781References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20586
Published: 2022-12-16
Description: In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238718854References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20587
Published: 2022-12-16
Description: In ppmp_validate_wsm of drm_fw.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238720411References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20588
Published: 2022-12-16
Description: In sysmmu_map of sysmmu.c, there is a possible EoP due to a precondition check failure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238785915References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01