Google Android vulnerabilities

CVE-2022-20124 [HIGH] CVE-2022-20124: In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 An

CVE-2020-0346 [HIGH] CWE-190 CVE-2020-0346: In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled (which it is by default), with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002762

CVE-2019-9407 [HIGH] CVE-2019-9407: In notification management of the service manager, there is a possible permissions bypass. This coul In notification management of the service manager, there is a possible permissions bypass. This could lead to local escalation of privilege by preventing user notification, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112434609

CVE-2022-39090 [HIGH] CWE-862 CVE-2022-39090: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39092 [HIGH] CWE-862 CVE-2022-39092: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39091 [HIGH] CWE-862 CVE-2022-39091: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39095 [HIGH] CWE-862 CVE-2022-39095: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39101 [HIGH] CWE-862 CVE-2022-39101: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39096 [HIGH] CWE-862 CVE-2022-39096: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39099 [HIGH] CWE-862 CVE-2022-39099: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39102 [HIGH] CWE-862 CVE-2022-39102: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39094 [HIGH] CWE-862 CVE-2022-39094: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39100 [HIGH] CWE-862 CVE-2022-39100: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2020-27030 [HIGH] CVE-2020-27030: In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150612638

CVE-2020-0243 [HIGH] CWE-416 CVE-2020-0243: In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper lock In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-1

CVE-2022-26472 [HIGH] CWE-502 CVE-2022-26472: In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319095; Issue ID: ALPS07319095.

CVE-2022-39098 [HIGH] CWE-862 CVE-2022-39098: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-39097 [HIGH] CWE-862 CVE-2022-39097: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2020-0369 [HIGH] CWE-190 CVE-2020-0369: In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to lo In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130231426

CVE-2022-20477 [HIGH] CWE-783 CVE-2022-20477: In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to s In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A