2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20539 | MEDIUM | 6.7 | 0.1% | Dec 16, 2022 | In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead ... |
| CVE-2022-20538 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query... |
| CVE-2022-20537 | LOW | 3.3 | 0.1% | Dec 16, 2022 | In createDialog of WifiScanModeActivity.java, there is a possible way for a Guest user to enable location-sensitive sett... |
| CVE-2022-20536 | LOW | 3.3 | 0.1% | Dec 16, 2022 | In registerBroadcastReceiver of RcsService.java, there is a possible way to change preferred TTY mode due to a missing p... |
| CVE-2022-20535 | LOW | 3.3 | 0.1% | Dec 16, 2022 | In registerLocalOnlyHotspotSoftApCallback of WifiManager.java, there is a possible way to determine whether an app is in... |
| CVE-2022-20533 | LOW | 3.3 | 0.1% | Dec 16, 2022 | In getSlice of WifiSlice.java, there is a possible way to connect a new WiFi network from the guest mode due to a missin... |
| CVE-2022-20531 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side cha... |
| CVE-2022-20530 | MEDIUM | 5.3 | 0.5% | Dec 16, 2022 | In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information ... |
| CVE-2022-20529 | LOW | 2.4 | 0.2% | Dec 16, 2022 | In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in ... |
| CVE-2022-20528 | LOW | 3.3 | 0.1% | Dec 16, 2022 | In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check. This could lead to l... |
| CVE-2022-20527 | MEDIUM | 5.5 | 0.1% | Dec 16, 2022 | In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead ... |
| CVE-2022-20526 | LOW | 3.3 | 0.1% | Dec 16, 2022 | In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This... |
| CVE-2022-20525 | LOW | 3.3 | 0.1% | Dec 16, 2022 | In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of visual voicemail package nam... |
| CVE-2022-20524 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to loc... |
| CVE-2022-20523 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check.... |
| CVE-2022-20522 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In getSlice of ProviderModelSlice.java, there is a missing permission check. This could lead to local escalation of priv... |
| CVE-2022-20521 | MEDIUM | 5 | 0.2% | Dec 16, 2022 | In sdpu_find_most_specific_service_uuid of sdp_utils.cc, there is a possible way to crash Bluetooth due to a missing nul... |
| CVE-2022-20520 | HIGH | 7.8 | 0.2% | Dec 16, 2022 | In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of priv... |
| CVE-2022-20519 | LOW | 3.3 | 0.1% | Dec 16, 2022 | In onCreate of AddAppNetworksActivity.java, there is a possible way for a guest user to configure WiFi networks due to a... |
| CVE-2022-20518 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead t... |
| CVE-2022-20517 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection... |
| CVE-2022-20516 | HIGH | 7.5 | 0.8% | Dec 16, 2022 | In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. Thi... |
| CVE-2022-20515 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the S... |
| CVE-2022-20514 | MEDIUM | 6.7 | 0.2% | Dec 16, 2022 | In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.c... |
| CVE-2022-20513 | MEDIUM | 5.5 | 0.2% | Dec 16, 2022 | In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lea... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now