Google Android vulnerabilities

CVE-2021-0344 [MEDIUM] CVE-2021-0344: In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05437558.

CVE-2020-0336 [MEDIUM] CWE-787 CVE-2020-0336: In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to loc In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444

CVE-2021-0362 [MEDIUM] CWE-787 CVE-2021-0362: In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to loc In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457070.

CVE-2020-0153 [MEDIUM] CWE-787 CVE-2020-0153: In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a mis In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139733543

CVE-2020-0186 [MEDIUM] CWE-787 CVE-2020-0186: In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds chec In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146144463

CVE-2021-0361 [MEDIUM] CWE-125 CVE-2021-0361: In kisd, there is a possible out of bounds read due to improper input validation. This could lead to In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05449968.

CVE-2020-0330 [MEDIUM] CWE-416 CVE-2020-0330: In iorap, there is a possible memory corruption due to a use after free. This could lead to local es In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150331085

CVE-2020-0003 [MEDIUM] CWE-367 CVE-2020-0003: In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-che In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-140195904

CVE-2022-32614 [MEDIUM] CWE-415 CVE-2022-32614: In audio, there is a possible memory corruption due to a logic error. This could lead to local escal In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310571; Issue ID: ALPS07310571.

CVE-2022-32620 [MEDIUM] CWE-787 CVE-2022-32620: In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalat In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07541753; Issue ID: ALPS07541753.

CVE-2022-32590 [MEDIUM] CWE-754 CVE-2022-32590: In wlan, there is a possible use after free due to an incorrect status check. This could lead to loc In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07299425; Issue ID: ALPS07299425.

CVE-2022-21778 [MEDIUM] CWE-125 CVE-2022-21778: In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421.

CVE-2022-20064 [MEDIUM] CWE-125 CVE-2022-20064: In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lea In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108617; Issue ID: ALPS06108617.

CVE-2021-0668 [MEDIUM] CWE-755 CVE-2021-0668: In apusys, there is a possible memory corruption due to incorrect error handling. This could lead to In apusys, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05670521; Issue ID: ALPS05670521.

CVE-2021-0634 [MEDIUM] CWE-908 CVE-2021-0634: In display driver, there is a possible memory corruption due to uninitialized data. This could lead In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594994; Issue ID: ALPS05594994.

CVE-2021-0898 [MEDIUM] CWE-416 CVE-2021-0898: In apusys, there is a possible memory corruption due to a use after free. This could lead to local e In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672071.

CVE-2021-0893 [MEDIUM] CWE-416 CVE-2021-0893: In apusys, there is a possible memory corruption due to a use after free. This could lead to local e In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05687474.

CVE-2021-0899 [MEDIUM] CWE-416 CVE-2021-0899: In apusys, there is a possible memory corruption due to a use after free. This could lead to local e In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672059.

CVE-2021-0667 [MEDIUM] CWE-416 CVE-2021-0667: In apusys, there is a possible memory corruption due to a use after free. This could lead to local e In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05670581; Issue ID: ALPS05670581.

CVE-2021-0664 [MEDIUM] CWE-416 CVE-2021-0664: In ccu, there is a possible memory corruption due to a use after free. This could lead to local esca In ccu, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827158; Issue ID: ALPS05827158.