2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20549 | MEDIUM | 6.7 | 0.1% | Dec 16, 2022 | In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This... |
| CVE-2022-20546 | MEDIUM | 6.7 | 0.1% | Dec 16, 2022 | In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could... |
| CVE-2022-20544 | MEDIUM | 4.4 | 0.1% | Dec 16, 2022 | In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a m... |
| CVE-2022-20541 | MEDIUM | 4.2 | 0.2% | Dec 16, 2022 | In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could... |
| CVE-2022-20539 | MEDIUM | 6.7 | 0.1% | Dec 16, 2022 | In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead ... |
| CVE-2022-20538 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query... |
| CVE-2022-20531 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side cha... |
| CVE-2022-20530 | MEDIUM | 5.3 | 0.5% | Dec 16, 2022 | In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information ... |
| CVE-2022-20527 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead ... |
| CVE-2022-20523 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check.... |
| CVE-2022-20521 | MEDIUM | 5 | 0.2% | Dec 16, 2022 | In sdpu_find_most_specific_service_uuid of sdp_utils.cc, there is a possible way to crash Bluetooth due to a missing nul... |
| CVE-2022-20518 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead t... |
| CVE-2022-20517 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection... |
| CVE-2022-20515 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the S... |
| CVE-2022-20514 | MEDIUM | 6.7 | 0.2% | Dec 16, 2022 | In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.c... |
| CVE-2022-20513 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lea... |
| CVE-2022-20511 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead ... |
| CVE-2022-20510 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the n... |
| CVE-2022-20509 | MEDIUM | 6.7 | 0.2% | Dec 16, 2022 | In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This co... |
| CVE-2022-20505 | MEDIUM | 6.7 | 0.1% | Dec 16, 2022 | In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lea... |
| CVE-2022-20504 | MEDIUM | 6.7 | 0.2% | Dec 16, 2022 | In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escalat... |
| CVE-2022-20199 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This coul... |
| CVE-2022-4555 | MEDIUM | 5.3 | 0.7% | Dec 16, 2022 | The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deacti... |
| CVE-2022-36223 | MEDIUM | 6.1 | 0.4% | Dec 16, 2022 | In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administra... |
| CVE-2022-46870 | MEDIUM | 5.4 | 1.1% | Dec 16, 2022 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now