Google Android vulnerabilities

CVE-2022-20314 [MEDIUM] CWE-20 CVE-2022-20314: In KeyChain, there is a possible spoof keychain chooser activity request due to improper input valid In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191876118

CVE-2022-20306 [MEDIUM] CWE-416 CVE-2022-20306: In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could le In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199680794

CVE-2022-26435 [MEDIUM] CWE-787 CVE-2022-26435: In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; Issue ID: ALPS07138435.

CVE-2022-26434 [MEDIUM] CWE-787 CVE-2022-26434: In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead t In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138450; Issue ID: ALPS07138450.

CVE-2022-26431 [MEDIUM] CWE-787 CVE-2022-26431: In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead t In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032553; Issue ID: ALPS07032553.

CVE-2022-26430 [MEDIUM] CWE-787 CVE-2022-26430: In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; Issue ID: ALPS07032521.

CVE-2022-26432 [MEDIUM] CWE-787 CVE-2022-26432: In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead t In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032542; Issue ID: ALPS07032542.

CVE-2022-26433 [MEDIUM] CWE-843 CVE-2022-26433: In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138400; Issue ID: ALPS07138400.

CVE-2023-20753 [MEDIUM] CWE-787 CVE-2023-20753: In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local esca In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue ID: ALPS07588667.

CVE-2023-20740 [MEDIUM] CWE-787 CVE-2023-20740: In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalat In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559819; Issue ID: ALPS07559840.

CVE-2023-20739 [MEDIUM] CWE-787 CVE-2023-20739: In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalat In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559819; Issue ID: ALPS07559819.

CVE-2023-20630 [MEDIUM] CWE-787 CVE-2023-20630: In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628505; Issue ID: ALPS07628505.

CVE-2023-20632 [MEDIUM] CWE-787 CVE-2023-20632: In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628506; Issue ID: ALPS07628506.

CVE-2022-32651 [MEDIUM] CWE-131 CVE-2022-32651: In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escala In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225857; Issue ID: ALPS07225857.

CVE-2022-32652 [MEDIUM] CWE-20 CVE-2022-32652: In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escala In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262617; Issue ID: ALPS07262617.

CVE-2022-32650 [MEDIUM] CWE-131 CVE-2022-32650: In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escala In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225853; Issue ID: ALPS07225853.

CVE-2022-32653 [MEDIUM] CWE-20 CVE-2022-32653: In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escala In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262518; Issue ID: ALPS07262518.

CVE-2022-26467 [MEDIUM] CWE-787 CVE-2022-26467: In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead t In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07167738; Issue ID: ALPS07167738.

CVE-2022-26464 [MEDIUM] CWE-787 CVE-2022-26464: In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032699; Issue ID: ALPS07032699.

CVE-2022-26465 [MEDIUM] CWE-787 CVE-2022-26465: In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could l In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558799; Issue ID: ALPS06558799.