Search vulnerabilities

Results 425,865

CVE-2022-48514

The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-48513

Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-48512

Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-48511

Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-48510

Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-48509

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-48507

Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-48502

kernel: ntfs3 subsystem does not properly check for correctness during disk reads

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Products
Linux Kernel H300s H410c and 3 more
CVE-2022-48487

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-48475

Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Overflow when the adminitrator tries to accept or delete the print query created by the request.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Cbm
Products
CVE-2022-48474

Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process.

CVSS 3.1 · 8.2 High EPSS 1.2% KEV · Not listed
Vendors
Cbm
Products
CVE-2022-48464

In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2022-48463

In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2022-48462

In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2022-48461

In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2022-48460

In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android Sc7731e Sc9832e and 10 more
CVE-2022-48459

In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2022-48458

In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2022-48457

In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2022-48456

In camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more