CVE-2023-20775

CVE-2023-20775 describes a local out-of-bounds write in the display code due to a missing bounds check, enabling local privilege escalation with System rights; no user interaction required. Impacted hardware is reported as various MediaTek chips (per connected references), with a patch identified...

CVE-2023-20806

CVE-2023-20806 affects the MediaTek chipset-embedded hcp module, where a missing bounds check can cause an out-of-bounds write. This can lead to local escalation of privilege with System execution privileges required, and no user interaction is needed for exploitation. The issue is tied to patch ...

CVE-2023-20816

CVE-2023-20816 concerns MediaTek WLAN software, where an out-of-bounds write caused by improper input validation can enable local escalation of privilege with SYSTEM privileges required. The issue affects the WLAN service and does not require user interaction to exploit. Documentation notes a pat...

CVE-2023-21298

CVE-2023-21298 is a disclosed vulnerability affecting Slice, described as a side-channel information disclosure that can lead to local privilege escalation without extra execution privileges or user interaction. Connected sources corroborate an installed-apps disclosure with local elevation of pr...

CVE-2023-21305

Technical details for CVE-2023-21305 are not publicly provided in the supplied documents. No specifics on affected products, versions, or fixes are present. Please monitor for updates.

CVE-2023-21380

CVE-2023-21380 is a Bluetooth heap buffer overflow in Android that can enable local elevation of privilege with SYSTEM execution when exploited without user interaction. The vulnerability is listed in Android 14 security release notes and associated with an out-of-bounds write in Bluetooth. Affec...

CVE-2023-30936

CVE-2023-30936 affects the telephony service where a missing permission check can lead to local information disclosure without extra execution privileges. Concrete references in trusted sources indicate impact on UNISOC chipsets (e.g., various SC and T-series models) with local access required an...

CVE-2023-32817

CVE-2023-32817 affects the gnss service. The issue is an out-of-bounds read caused by improper input validation, leading to local information disclosure with system execution privileges required. Exploitation does not require user interaction. A patch is available: ALPS08044040 (Issue ALPS0804403...

CVE-2023-32839

The CVE-2023-32839 entry describes a local out-of-bounds write in the dpe module caused by missing range checking, enabling local privilege escalation with SYSTEM rights and no user interaction. Affected: dpe (MediaTek-related context from multiple sources); impact is high for confidentiality, in...

CVE-2023-32881

CVE-2023-32881 affects MediaTek battery module. A possible information disclosure stems from an integer overflow, enabling local information disclosure with system-level privileges; no user interaction is required. Patch ALPS08308070 / ALPS08308080 is referenced. No exploit details or in-the-wild...

CVE-2023-33881

Summary: CVE-2023-33881 describes a missing permission check in the telephony service that can cause local information disclosure without extra privileges. The issue is documented across multiple sources (NVD/Red Hat/CVE listing) with the same core impact: local information leakage, low attack co...

CVE-2023-42649

CVE-2023-42649 concerns UNISOC chipsets’ engineermode where a missing permission check allows local information disclosure without requiring execution privileges. Affected component: engineermode logic; root cause: inadequate permission validation leading to exposure of sensitive data to local at...

CVE-2023-42653

CVE-2023-42653 affects the faceid service in UNISOC chipsets. The root cause is a missing bounds check that enables an out-of-bounds write, potentially causing a local denial of service with no additional execution privileges. According to the provided documents, the issue is a local impact (AV:L...

CVE-2024-20015

CVE-2024-20015 involves a permissions bypass in the telephony stack that can enable local privilege escalation with no user interaction. Documentation across sources (NVD, Red Hat, CVE lists) notes a local-privilege escalation impact and identifies a patch/Issue ID: ALPS08441419. The exact affect...

CVE-2024-20110

The CVE-2024-20110 entry describes a vulnerability in the ccu component (MediaTek-related) where an out-of-bounds write can occur due to a missing bounds check. This could enable local escalation of privilege, requiring System execution privileges and no user interaction for exploitation. Affecte...

CVE-2024-20135

In soundtrigger, a missing bounds check can cause an out-of-bounds write, enabling local escalation to System privileges with no user interaction required. Several sources (NVD/Red Hat/CVE references) confirm the issue and patch ID ALPS09142526 (Issue MSV-1841) as the remediation. Affected produc...

CVE-2026-0075

The CVE-2026-0075 entry describes a SQL injection that could permit access to the contacts database, enabling local escalation of privilege with no additional privileges required and no user interaction needed. Connected documents (including RH/CVE, EUVD, NVD, CNNVD, and others) reiterate the sam...

CVE-2014-3164

CVE-2014-3164 affects Android code in cmds/servicemanager/service_manager.c prior to commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5. The vulnerability allows a denial of service via a NULL pointer dereference or an out-of-bounds write, related to binder passed lengths. Connected documents (NVD e...

CVE-2014-7920

CVE-2014-7920 affects the Android mediaserver component. The entry describes a privilege-escalation flaw in mediaserver present on Android 2.2–5.x up to before 5.1, enabling attackers to gain privileges. The documents do not specify the exact root cause or exploit details, and no remediation/patc...

CVE-2014-7952

CVE-2014-7952 affects the Android backup/restore flow via ADB. The backup manager does not filter the data stream from apps’ BackupAgent, enabling a malicious BackupAgent (no Android permissions) to inject extra APKs into the backup archive. Upon restoration, the system installs the injected APKs...

CVE-2014-8609

The CVE-2014-8609 vulnerability affects the Android Settings application (pre-5.0.0) where AddAccountSettings.java creates a PendingIntent incorrectly. This allows a third-party authenticator to trigger a broadcast using the SYSTEM UID, potentially injecting arbitrary component, action, or catego...

CVE-2014-9788

Converged detail from CNVD-2016-04814 confirms CVE-2014-9788 is a buffer overflow in the Qualcomm sound driver in Android on Nexus 5 prior to 2016-07-05, exploitable by a crafted app to gain privileges. Root cause: overflow in the Qualcomm sound driver; Impact: local privilege escalation. A patch...

CVE-2014-9873

CVE-2014-9873 describes an integer underflow in Qualcomm components, specifically in drivers/char/diag/diag_dci.c, affecting Android on Nexus 5 and Nexus 7 (2013) devices prior to 2016-08-05. The flaw allows a crafted application to gain privileges or access sensitive information via the affected...

CVE-2014-9942

CVE-2014-9942 affects the boot path in all Android releases from CAF that use the Linux kernel. The root cause is a Use of Uninitialized Variable in the boot code, which could lead to memory corruption or unpredictable behavior. The NVD CVSSv3 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a...

CVE-2014-9971

CVE-2014-9971 affects Qualcomm components in Android CAF builds using the Linux kernel. The vulnerability arises when asserts are disabled, causing an instruction inside an assert to be skipped and enabling incorrect control flow. NVD lists a CVSSv3 base score of 9.8 (CRITICAL) with NETWORK attac...

CVE-2015-3879

CVE-2015-3879 affects the Android Media Player Framework (Android 5.1.1 LMY48T and earlier). The issue allows an attacker via a crafted application to gain privileges in mediaserver through memory corruption in media processing paths. Connected sources frame this as an elevation-of-privilege vuln...

CVE-2015-8937

CVE-2015-8937 concerns a privilege-escalation vulnerability in the Qualcomm component used by Android on Nexus devices (Nexus 5/6/7, 2013) due to mishandling a socket in drivers/char/diag/diagchar_core.c. The flaw allows a crafted application to gain privileges within the device context. Root cau...

CVE-2015-9032

CVE-2015-9032: In CAF Android releases using the Linux kernel, a DRM key was exposed to QTEE applications, enabling information disclosure of DRM secrets. The description does not provide remediation details or explicit root-cause fixes in the supplied documents.

CVE-2015-9071

CVE-2015-9071 describes a buffer over-read in a TrustZone syscall present in all Qualcomm products with Android CAF builds using the Linux kernel. The vulnerability affects Qualcomm components integrated in Android and is triggered via a TrustZone interface, enabling a high-impact condition consi...

CVE-2016-0808

CVE-2016-0808 is a local-denial-of-service vulnerability in the Android Minikin library. The issue arises from an integer overflow in getCoverageFormat12 (CmapCoverage.cpp) in Minikin, affecting Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01, potentially enabling a crafted TTF font to ...

CVE-2016-0842

CVE-2016-0842 affects libstagefright’s H.264 decoder in Android 6.x prior to 2016-04-01. The root cause is improper handling of MMCO data, enabling memory corruption that could allow remote code execution or a denial of service via crafted media files. Public details specify the affected componen...

CVE-2016-0849

CVE-2016-0849 describes an Elevation of Privilege in Android’s Recovery Procedure due to multiple integer overflows in minzip/SysUtil.c. A local attacker could exploit a crafted application to gain Signature or SignatureOrSystem privileges. Affected versions: Android 5.0.x prior to 5.0.2, 5.1.x p...

CVE-2016-10340

CVE-2016-10340 affects CAF Android releases that use the Linux kernel, with an issue described as an integer underflow in a syscall handler that leads to a buffer overflow. The documents provided confirm the vulnerability description but do not give specific product/vendor versions, affected kern...

CVE-2016-10344

CVE-2016-10344 affects Qualcomm components in Android CAF builds using the Linux kernel, where an out-of-range pointer offset in LTE could be exploited. The entry lists a high-severity impact (CVSS v3 base score 9.8, CRITICAL) with attack vector Network and no user interaction, but the provided d...

CVE-2016-11045

The CVE-2016-11045 entry relates to Samsung mobile devices running Lollipop (5.0/5.1) where the Gallery library is vulnerable to memory corruption triggered by a malformed image. Documented impact indicates potential data/process integrity concerns within the Gallery component. The issue is assoc...

CVE-2016-11052

This CVE affects Samsung mobile devices running Lollipop (5.0/5.1) and involves memory corruption in je_free() within libQjpeg.so (Qt 5.5’s Qjpeg). The root cause is parsing a malformed JPEG file, leading to potential memory corruption in affected components. Connected documents confirm the issue...

CVE-2016-2416

CVE-2016-2416 is an information-disclosure flaw in Android mediaserver where libs/gui/BufferQueueConsumer.cpp does not check android.permission.DUMP, enabling a dump request to bypass protection and obtain signatures. Affected: Mediaserver component in Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, ...

CVE-2016-2449

CVE-2016-2449 affects Android mediaserver: Camera3Device.cpp in mediaserver allows privilege escalation due to not validating template IDs, enabling a crafted app to gain Signature or SignatureOrSystem access. Affected: Android 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before ...

CVE-2016-2452

CVE-2016-2452 affects Android mediaserver (libstagefright) — specifically codecs/amrnb/dec/SoftAMR.cpp — where buffer sizes are not properly validated. The issue resides in the AMR-NB decoding path and can allow a local attacker to escalate privileges to Signature or SignatureOrSystem by deliveri...

CVE-2016-2457

CVE-2016-2457 affects Android Wi‑Fi, specifically server/pm/UserManagerService.java, and is described as a bypass against restrictions on Wi‑Fi configuration changes via guest access in Android 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-05-01). The connected documents confir...

CVE-2016-2460

CVE-2016-2460 is an information-disclosure vulnerability in Android’s mediaserver. Affected: Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x prior to 2016-05-01. Root cause: mediaserver fails to initialize certain data structures in the IGraphicBufferConsumer.cpp/IGraphicBu...

CVE-2016-3772

CVE-2016-3772 concerns the MediaTek drivers in Android One devices prior to 2016-07-05, enabling local privilege escalation via a crafted application. The issue is described as Android internal bug 29008188 and MediaTek internal bug ALPS02703102, with affected software components being the Androi...

CVE-2016-3832

CVE-2016-3832 targets Android’s framework APIs. The vulnerability arises because Android 4.x–6.x runtime framework code does not consistently verify that package data originates from the Package Manager, potentially bypassing a protection mechanism via a crafted application. Affected versions inc...

CVE-2016-3856

CVE-2016-3856 affects Android’s netd daemon, where versions prior to 2016-08-05 mishandle tethering and stdio streams. The root cause is a handling flaw in tethering/stdio data processing, which can be exploited by a crafted application to cause a denial of service and potentially other unspecifi...

CVE-2016-3918

CVE-2016-3918 affects AOSP Mail’s email/provider/AttachmentProvider.java. The issue arises in Android versions 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, 6.x up to 2016-10-01, and 7.0 up to 2016-10-01, where certain values are not validated as integers, enabling a local attacker to re...

CVE-2016-5864

CVE-2016-5864 affects Qualcomm sound driver components used in Android for MSM, Firefox OS for MSM, and QRD Android. The issue stems from user-supplied parameters that can trigger integer overflow, potentially followed by a buffer overflow, and a separate lower-bound check omission that may cause...

CVE-2016-6689

CVE-2016-6689 affects the Android kernel Binder path. The description explicitly states that Binder in the kernel on Android devices (notably Nexus) prior to 2016-10-05 can allow a crafted application to obtain sensitive information, i.e., an information-disclosure vulnerability in the Binder sub...

CVE-2016-6692

CVE-2016-6692 affects the Qualcomm MDSS driver in Android, specifically the mdss_mdp_pp.c component. The defect allows a denial of service (invalid pointer access) and possibly unspecified other impact via unknown vectors, tied to Qualcomm internal bug CR 1004933. The vulnerability is described f...

CVE-2016-6709

CVE-2016-6709 describes an information disclosure vulnerability in Conscrypt and BoringSSL used by Android. The issue affects Android 6.x and 7.0 prior to 2016-11-01, where a MITM attacker could access sensitive data if a non-standard cipher suite is used by an application. The root cause is an i...

CVE-2016-6710

CVE-2016-6710 affects the Android Download Manager. The vulnerability is an information disclosure where a local malicious app could bypass OS data isolation to access data from other apps, arising in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01...