CVSS: 7.8EPSS: 0%CPEs: 11EXPL: 0CVE-2022-20027
https://notcve.org/view.php?id=CVE-2022-20027
09 Feb 2022 — In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126826; Issue ID: ALPS06126826. En Bluetooth, es posible que sea producida una escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/February-2022 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 11EXPL: 0CVE-2022-20025
https://notcve.org/view.php?id=CVE-2022-20025
09 Feb 2022 — In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126832; Issue ID: ALPS06126832. En Bluetooth, es posible que sea producida una escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/February-2022 • CWE-787: Out-of-bounds Write •
CVSS: 6.6EPSS: 0%CPEs: 1EXPL: 0CVE-2022-23728
https://notcve.org/view.php?id=CVE-2022-23728
21 Jan 2022 — Attacker can reset the device with AT Command in the process of rebooting the device. The LG ID is LVE-SMP-210011. El atacante puede reiniciar el dispositivo con el comando AT en el proceso de reinicio del dispositivo. El ID de LG es LVE-SMP-210011 • https://lgsecurity.lge.com/bulletins/mobile • CWE-684: Incorrect Provision of Specified Functionality •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2021-1037
https://notcve.org/view.php?id=CVE-2021-1037
14 Jan 2022 — The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-162951906 La emisión que la función DevicePickerFragment envía cuando es emparejado un nuevo dispositivo no presenta ninguna comprobación de permisos, por lo que cualquier aplicación p... • https://source.android.com/security/bulletin/aaos/2022-01-01 • CWE-862: Missing Authorization •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2021-1036
https://notcve.org/view.php?id=CVE-2021-1036
14 Jan 2022 — In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-182812255 En la función LocationSettingsActivity del archivo AndroidManifest.xml, se presenta un posible EoP debido a un ataque de tapjacking/overlay. Esto podría conllevar a un... • https://source.android.com/security/bulletin/aaos/2022-01-01 • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •
CVSS: 7.0EPSS: 0%CPEs: 4EXPL: 0CVE-2021-39629
https://notcve.org/view.php?id=CVE-2021-39629
14 Jan 2022 — In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-197353344 En las funciones phTmlNfc_Init y phTmlNfc_CleanUp del archivo phTmlNfc.cc, se presenta un posible uso de memoria previamente liberada debido a una condición de c... • https://source.android.com/security/bulletin/2022-01-01 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2021-39627
https://notcve.org/view.php?id=CVE-2021-39627
14 Jan 2022 — In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-185126549 En la función sendLegacyVoicemailNotification del archivo LegacyModeSmsHandler.java, se presenta una posible omisión de permisos debido a un Pending... • https://source.android.com/security/bulletin/2022-01-01 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2021-39626
https://notcve.org/view.php?id=CVE-2021-39626
14 Jan 2022 — In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194695497 En la función onAttach del archivo ConnectedDeviceDashboardFragment.java, se presenta un posible bypass de permisos debido a un problem... • https://source.android.com/security/bulletin/2022-01-01 • CWE-610: Externally Controlled Reference to a Resource in Another Sphere •
CVSS: 7.3EPSS: 0%CPEs: 4EXPL: 0CVE-2021-39625
https://notcve.org/view.php?id=CVE-2021-39625
14 Jan 2022 — In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194695347 En la función showCarrierAppInstallationNotification del archivo EuiccNotificationManager.java, se presenta una p... • https://source.android.com/security/bulletin/2022-01-01 •
CVSS: 10.0EPSS: 2%CPEs: 4EXPL: 1CVE-2021-39623
https://notcve.org/view.php?id=CVE-2021-39623
14 Jan 2022 — In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194105348 En la función doRead del archivo SimpleDecodingSource.cpp, se presenta una posible escritura fuera de límites debido a una comprobación de límites incorrecta. Es... • https://github.com/bb33bb/CVE-2021-39623 • CWE-787: Out-of-bounds Write •