2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20582 | HIGH | 7.8 | 0.1% | Dec 16, 2022 | In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This ... |
| CVE-2022-20568 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local es... |
| CVE-2022-20566 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local es... |
| CVE-2022-20561 | HIGH | 7.8 | 0.1% | Dec 16, 2022 | In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local esca... |
| CVE-2022-20560 | HIGH | 7.5 | 0.3% | Dec 16, 2022 | Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A |
| CVE-2022-20550 | HIGH | 7.8 | 0.1% | Dec 16, 2022 | In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This co... |
| CVE-2022-20548 | HIGH | 7.8 | 0.1% | Dec 16, 2022 | In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This c... |
| CVE-2022-20547 | HIGH | 7.8 | 0.1% | Dec 16, 2022 | In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing per... |
| CVE-2022-20545 | HIGH | 7.5 | 0.6% | Dec 16, 2022 | In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input vali... |
| CVE-2022-20540 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. Thi... |
| CVE-2022-20524 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to loc... |
| CVE-2022-20522 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In getSlice of ProviderModelSlice.java, there is a missing permission check. This could lead to local escalation of priv... |
| CVE-2022-20520 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of priv... |
| CVE-2022-20516 | HIGH | 7.5 | 0.8% | Dec 16, 2022 | In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. Thi... |
| CVE-2022-20512 | HIGH | 7.8 | 0.1% | Dec 16, 2022 | In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improp... |
| CVE-2022-20508 | HIGH | 7.8 | 0.1% | Dec 16, 2022 | In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a per... |
| CVE-2022-20507 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due t... |
| CVE-2022-20506 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of priv... |
| CVE-2022-20503 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration du... |
| CVE-2022-3109 | HIGH | 7.5 | 1.4% | Dec 16, 2022 | An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return valu... |
| CVE-2022-45338 | HIGH | 7.8 | 0.2% | Dec 15, 2022 | An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267... |
| CVE-2022-4511 | HIGH | 7.5 | 0.8% | Dec 15, 2022 | A vulnerability has been found in RainyGao DocSys and classified as critical. Affected by this vulnerability is an unkno... |
| CVE-2022-46701 | HIGH | 7.8 | 0.3% | Dec 15, 2022 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1... |
| CVE-2022-46700 | HIGH | 8.8 | 1.2% | Dec 15, 2022 | A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, m... |
| CVE-2022-46699 | HIGH | 8.8 | 1.2% | Dec 15, 2022 | A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, m... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now