Google Android vulnerabilities

CVE-2022-39129 [MEDIUM] CWE-121 CVE-2022-39129: In face detect driver, there is a possible out of bounds write due to a missing bounds check. This c In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

CVE-2022-39132 [MEDIUM] CWE-126 CVE-2022-39132: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

CVE-2022-38679 [MEDIUM] CWE-400 CVE-2022-38679: In music service, there is a missing permission check. This could lead to local denial of service in In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges needed.

CVE-2022-39115 [MEDIUM] CWE-862 CVE-2022-39115: In Music service, there is a missing permission check. This could lead to local denial of service in In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.

CVE-2021-0524 [MEDIUM] CWE-203 CVE-2021-0524: In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android I

CVE-2021-39659 [MEDIUM] CWE-755 CVE-2021-39659: In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible preventio In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 A

CVE-2021-0417 [MEDIUM] CWE-20 CVE-2021-0417: In memory management driver, there is a possible system crash due to improper input validation. This In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336702.

CVE-2021-0416 [MEDIUM] CWE-20 CVE-2021-0416: In memory management driver, there is a possible system crash due to improper input validation. This In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336700.

CVE-2021-0418 [MEDIUM] CWE-20 CVE-2021-0418: In memory management driver, there is a possible system crash due to improper input validation. This In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336706.

CVE-2021-0419 [MEDIUM] CWE-20 CVE-2021-0419: In memory management driver, there is a possible system crash due to improper input validation. This In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336713.

CVE-2021-39624 [MEDIUM] CVE-2021-39624: In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-67862680

CVE-2022-20051 [MEDIUM] CWE-269 CVE-2022-20051: In ims service, there is a possible unexpected application behavior due to incorrect privilege assig In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219127; Issue ID: ALPS06219127.

CVE-2022-20260 [MEDIUM] CVE-2022-20260: In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to loca In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-220865698

CVE-2022-20143 [MEDIUM] CWE-770 CVE-2022-20143: In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-220735360

CVE-2022-20272 [MEDIUM] CWE-276 CVE-2022-20272: In PermissionController, there is a possible misunderstanding about the default SMS application's pe In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to local information disclosure with User privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-207672568

CVE-2024-0026 [MEDIUM] CWE-770 CVE-2024-0026: In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20304 [MEDIUM] CWE-203 CVE-2022-20304: In Content, there is a possible way to determinate the user's account due to side channel informatio In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751919

CVE-2022-48231 [MEDIUM] CWE-476 CVE-2022-48231: In soter service, there is a possible missing permission check. This could lead to local denial of s In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVE-2022-48241 [MEDIUM] CWE-476 CVE-2022-48241: In telephony service, there is a possible missing permission check. This could lead to local denial In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVE-2022-38675 [MEDIUM] CWE-787 CVE-2022-38675: In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could le In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.