Google Android vulnerabilities

CVE-2022-32612 [MEDIUM] CWE-362 CVE-2022-32612: In vcu, there is a possible use after free due to a race condition. This could lead to local escalat In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203500; Issue ID: ALPS07203500.

CVE-2022-20080 [MEDIUM] CWE-362 CVE-2022-20080: In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local e In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05881290; Issue ID: ALPS05881290.

CVE-2022-20077 [MEDIUM] CWE-362 CVE-2022-20077: In vow, there is a possible memory corruption due to a race condition. This could lead to local esca In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05852812.

CVE-2022-20078 [MEDIUM] CWE-362 CVE-2022-20078: In vow, there is a possible memory corruption due to a race condition. This could lead to local esca In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05852819; Issue ID: ALPS05852819.

CVE-2022-32638 [MEDIUM] CWE-367 CVE-2022-32638: In isp, there is a possible out of bounds write due to a race condition. This could lead to local es In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494449; Issue ID: ALPS07494449.

CVE-2022-32621 [MEDIUM] CWE-362 CVE-2022-32621: In isp, there is a possible out of bounds write due to a race condition. This could lead to local es In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310829; Issue ID: ALPS07310829.

CVE-2023-20610 [MEDIUM] CWE-662 CVE-2023-20610: In display drm, there is a possible memory corruption due to a race condition. This could lead to lo In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363469; Issue ID: ALPS07363469.

CVE-2023-20607 [MEDIUM] CWE-662 CVE-2023-20607: In ccu, there is a possible memory corruption due to a race condition. This could lead to local esca In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07512839; Issue ID: ALPS07512839.

CVE-2023-20625 [MEDIUM] CWE-662 CVE-2023-20625: In adsp, there is a possible double free due to a race condition. This could lead to local escalatio In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628532; Issue ID: ALPS07628532.

CVE-2022-20013 [MEDIUM] CWE-367 CVE-2022-20013: In vow driver, there is a possible memory corruption due to a race condition. This could lead to loc In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05837742.

CVE-2022-26428 [MEDIUM] CWE-362 CVE-2022-26428: In video codec, there is a possible memory corruption due to a race condition. This could lead to lo In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260.

CVE-2023-20687 [MEDIUM] CWE-362 CVE-2023-20687: In display drm, there is a possible double free due to a race condition. This could lead to local es In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570772; Issue ID: ALPS07570772.

CVE-2023-20686 [MEDIUM] CWE-362 CVE-2023-20686: In display drm, there is a possible double free due to a race condition. This could lead to local es In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570826; Issue ID: ALPS07570826.

CVE-2023-20801 [MEDIUM] CWE-362 CVE-2023-20801: In imgsys, there is a possible use after free due to a race condition. This could lead to local esca In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420968.

CVE-2023-20788 [MEDIUM] CWE-367 CVE-2023-20788: In thermal, there is a possible use after free due to a race condition. This could lead to local esc In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648734; Issue ID: ALPS07648735.

CVE-2023-20787 [MEDIUM] CWE-367 CVE-2023-20787: In thermal, there is a possible use after free due to a race condition. This could lead to local esc In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648734; Issue ID: ALPS07648734.

CVE-2023-20835 [MEDIUM] CWE-362 CVE-2023-20835: In camsys, there is a possible use after free due to a race condition. This could lead to local esca In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07326570.

CVE-2024-20107 [MEDIUM] CWE-125 CVE-2024-20107: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to loca In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09124360; Issue ID: MSV-1823.

CVE-2025-26423 [MEDIUM] CWE-400 CVE-2025-26423: In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a perma In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-33723 [MEDIUM] CWE-1021 CVE-2022-33723: A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attacke A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack.