Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2022-20412 | In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to l… | Medium (6.7) | 2022-10-11 | Environment Specific |
| CVE-2022-20410 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. Thi… | High (7.5) | 2022-10-11 | Environment Specific |
| CVE-2022-20409 | In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to… | Medium (6.7) | 2022-10-11 | Environment Specific |
| CVE-2022-20394 | In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when anoth… | Medium (5.0) | 2022-10-11 | Environment Specific |
| CVE-2022-20351 | In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. Thi… | Medium (5.5) | 2022-10-11 | Environment Specific |