Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2022-20270 | In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. This could l… | Medium (5.5) | 2022-08-12 | Environment Specific |
| CVE-2022-20269 | In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala… | Medium (6.8) | 2022-08-12 | Environment Specific |
| CVE-2022-20268 | In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a p… | High (7.8) | 2022-08-12 | Environment Specific |
| CVE-2022-20267 | In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing p… | Low (3.3) | 2022-08-12 | Environment Specific |
| CVE-2022-20266 | In Companion, there is a possible way to keep a service running with elevated importance without showing foreground ser… | Medium (5.0) | 2022-08-12 | Environment Specific |