U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 2,761 matching records.
Displaying matches 541 through 560.
Vuln ID Summary CVSS Severity
CVE-2022-20178

In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-224932775References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 6.7 MEDIUM
V2.0: 4.6 MEDIUM
CVE-2022-20177

Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM
CVE-2022-20176

In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-197787879References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 4.4 MEDIUM
V2.0: 2.1 LOW
CVE-2022-20175

Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM
CVE-2022-20174

In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210847407References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 4.4 MEDIUM
V2.0: 2.1 LOW
CVE-2022-20173

Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 9.8 CRITICAL
V2.0: 10.0 HIGH
CVE-2022-20172

In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-206987222References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 2.1 LOW
CVE-2022-20171

Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 9.8 CRITICAL
V2.0: 10.0 HIGH
CVE-2022-20170

Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 9.8 CRITICAL
V2.0: 10.0 HIGH
CVE-2022-20169

Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM
CVE-2022-20168

Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 7.5 HIGH
V2.0: 7.8 HIGH
CVE-2022-20167

Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A

Published: June 15, 2022; 10:15:12 AM -0400 		V4.0:(not available)
 V3.1: 9.8 CRITICAL
V2.0: 10.0 HIGH
CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel

Published: June 15, 2022; 10:15:11 AM -0400 		V4.0:(not available)
 V3.1: 6.7 MEDIUM
V2.0: 4.6 MEDIUM
CVE-2022-20165

In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-220868345References: N/A

Published: June 15, 2022; 10:15:11 AM -0400 		V4.0:(not available)
 V3.1: 4.4 MEDIUM
V2.0: 4.9 MEDIUM
CVE-2022-20164

Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A

Published: June 15, 2022; 10:15:11 AM -0400 		V4.0:(not available)
 V3.1: 9.8 CRITICAL
V2.0: 10.0 HIGH
CVE-2022-20162

In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223492713References: N/A

Published: June 15, 2022; 10:15:11 AM -0400 		V4.0:(not available)
 V3.1: 4.4 MEDIUM
V2.0: 4.9 MEDIUM
CVE-2022-20160

Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A

Published: June 15, 2022; 10:15:11 AM -0400 		V4.0:(not available)
 V3.1: 9.8 CRITICAL
V2.0: 10.0 HIGH
CVE-2022-20159

In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210971465References: N/A

Published: June 15, 2022; 10:15:11 AM -0400 		V4.0:(not available)
 V3.1: 4.4 MEDIUM
V2.0: 4.9 MEDIUM
CVE-2022-20156

In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-212803946References: N/A

Published: June 15, 2022; 10:15:11 AM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0: 7.2 HIGH
CVE-2022-20155

In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-176754369References: N/A

Published: June 15, 2022; 10:15:11 AM -0400 		V4.0:(not available)
 V3.1: 7.0 HIGH
V2.0: 6.9 MEDIUM