CVE-2018-9359

CVE-2018-9359 describes an out-of-bounds read in Android’s L2CAP handling (process_l2cap_cmd in l2c_main.cc) that could lead to remote information disclosure without prior privileges or user interaction. Affected products span Android 6.0 through 8.1 (Android-6.0/6.0.1, 7.0/7.1.x, 8.0, 8.1). The ...

CVE-2018-9591

The CVE-2018-9591 issue affects Android components: the function bta_hh_ctrl_dat_act in bta_hh_act.cc, across Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0. It is caused by a missing bounds check that allows an out-of-bounds read, enabling remote information disclosure without extra privileges, wi...

CVE-2019-2035

The CVE-2019-2035 issue affects Android and is caused by a missing bounds check in rw_i93_sm_update_ndef within rw_i93.cc, leading to an out-of-bounds write. The described impact is local elevation of privilege with user interaction required for exploitation, on Android versions 7.0–9 (Android ID...

CVE-2019-20530

CVE-2019-20530 affects Samsung mobile devices running N(7.1), O(8.x), P(9.0) and Q(10.0). The vulnerability enables arbitrary code execution on the lock screen, linked to Samsung identifier SVE-2019-15266. Public sources in the provided set reiterate the description but do not disclose root cause...

CVE-2019-2085

Summary: CVE-2019-2085 is an out-of-bounds write in libxaac on Android 10 due to a missing bounds check, enabling remote code execution with user interaction required. The issue is tied to the Android 10 libxaac/Android-10 stack, with a high impact and network attack vector per CVE details. Affec...

CVE-2019-2116

CVE-2019-2116 affects Android: a possible out-of-bounds read in save_attr_seq of sdp_discovery.cc could lead to remote information disclosure without user interaction. Documented impact is information disclosure (confidentiality) with no execution privileges required. Affected Android versions in...

CVE-2019-2137

CVE-2019-2137 affects Android 9 (Pie); the issue is in TelecomManager.java endCall() where a missing permission check allows a local DoS that can block access to Emergency Services with user execution privileges, and does not require user interaction. Exploitation details are not provided in the ...

CVE-2019-9431

CVE-2019-9431 describes a Bluetooth vulnerability in Android 10: a use-after-free leads to an out-of-bounds read, enabling remote information disclosure. The issue can disclose heap information and requires no user interaction, with potential system-level privileges needed for impact per public r...

CVE-2020-0005

CVE-2020-0005 describes an out-of-bounds write in the Bluetooth stack (btm_read_remote_ext_features_complete in btm_acl.cc) that could enable local elevation of privilege to SYSTEM on Android 8.0–10. No user interaction is required. Public docs list Android versions affected as 8.0, 8.1, 9, and 1...

CVE-2020-0026

CVE-2020-0026 affects Android 8.0–10 via Parcel::continueWrite in Parcel.cpp, where a use-after-free causes memory corruption and local elevation of privilege without user interaction. Documented impact is elevated privileges in a local context; no remote code execution details are provided. Affe...

CVE-2020-0098

CVE-2020-0098 affects Android framework (ActivityStack.java) and enables a local elevation of privilege due to a confused deputy in navigateUpToLocked. The issue allows a local attacker to bypass permissions without extra execution privileges, with no user interaction required. Affected Android v...

CVE-2020-0190

CVE-2020-0190 affects Android 10 with a vulnerability in ideint_weave_blk of ideint_utils.c caused by a heap buffer overflow leading to an out-of-bounds write. This could enable remote code execution. Exploitation requires user interaction per the description. The Pixel security bulletin lists CV...

CVE-2020-0268

CVE-2020-0268 affects Android 11. In the NFC stack, a race condition can cause a use-after-free, enabling local escalation of privilege to System privileges without user interaction. Impact is described as local, with a High/Moderate multi-source assessment in public records; exploitation status ...

CVE-2020-0275

CVE-2020-0275 is a local elevation-of-privilege issue in Android 11 related to the MediaProvider. The root cause is a permissions bypass that allows an app to access ContentResolver and MediaStore entries it should not reach. Impact is a local elevation of privilege with no extra execution privil...

CVE-2020-12745

CVE-2020-12745 affects Samsung mobile devices running Q(10.0). The issue enables bypass of the locked-state protection to read clipboard content via USSD. The root cause is described as a protection bypass, but no further technical details or affected versions are provided in the connected docume...

CVE-2020-13829

CVE-2020-13829 affects Samsung mobile devices running Android P (9.0) and Q (10.0). The issue enables attackers to disable SEAndroid protection within the RKP (Recovery Kernel Patch). Root cause: SEAndroid enforcement can be turned off in RKP, per the available descriptions. Impact: disabling SEA...

CVE-2020-13835

The CVE-2020-13835 issue affects Samsung mobile devices running O(8.x) with TEEGRIS, specifically involving the Gatekeeper Trustlet. The vulnerability stems from a brute-force weakness in the Trustlet that allows credential guessing, enabling a user credential brute-force attack. The issue is tie...

CVE-2021-0345

CVE-2021-0345 affects Android: the issue is in the mobile_log_d component, caused by improper input validation. This permits local privilege escalation to System execution level on Android-10 and Android-11, with no user interaction required. Exploitation is described as local and does not indica...

CVE-2021-0346

CVE-2021-0346 affects Android devices via the VPU component. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local escalation to System privileges without user interaction. Affected: Android 10 and Android 11 (VPU). Impact per sources indicates local privilege el...

CVE-2021-0381

The CVE-2021-0381 issue affects Android 11 and is tied to DeviceStorageMonitorService.java (updateNotifications). It describes a possible permission bypass caused by an unsafe PendingIntent that can lead to local information disclosure without user interaction. The exploitable condition requires ...

CVE-2021-0406

CVE-2021-0406 is associated with MediaTek’s cameraisp on Android 10 and 11, where a missing bounds check can cause an out-of-bounds write. The flaw enables local escalation of privileges to System level with no user interaction required. Affected component: cameraisp image processor; root cause: ...

CVE-2021-0459

CVE-2021-0459 affects Google Android kernel code, specifically fts_driver_test_write in fts_proc.c. It is due to a missing bounds check, causing an out-of-bounds read that can disclose local information. Exploitation requires local access and does not require user interaction, with the potential ...

CVE-2021-0676

CVE-2021-0676 pertains to the geniezone driver, where an incorrect bounds check enables a possible out-of-bounds read . This could lead to local information disclosure with the attacker obtaining System execution privileges; exploitation requires no user interaction. Multiple sources (NVD, Red Ha...

CVE-2021-1040

CVE-2021-1040 describes an elevation-of-privilege vulnerability in Android where, in onCreate of BluetoothPairingSelectionFragment.java, a tapjacking/overlay attack could enable local escalation of privilege without requiring extra execution privileges. Affected products/versions include Android ...

CVE-2021-25410

The CVE-2021-25410 issue concerns Samsung CallBGProvider. Several connected sources confirm an Improper Access Control in CallBGProvider (pre-SMR JUN-2021 Release 1), enabling a local attacker to access arbitrary files with escalated privileges. Affected component: CallBGProvider; vulnerability t...

CVE-2021-25475

Summary of CVE-2021-25475 : The issue is a heap-based buffer overflow in the DSP kernel driver, before Samsung SMR Oct-2021 Release 1. This flaw can lead to arbitrary memory writes and code execution within the kernel context on affected Samsung devices. Affected component: DSP kernel driver. Roo...

CVE-2021-25516

CVE-2021-25516 affects Samsung Exynos baseband (prior to SMR Dec-2021 Release 1). An improper handling of exceptional conditions in the baseband’s RRC MeasurementReport allows an attacker to track a device’s location. Impact is described as location-tracking with high practicality on affected Sam...

CVE-2022-20018

CVE-2022-20018 concerns the seninf driver, with a reported information-disclosure issue caused by uninitialized data. This could lead to local information disclosure with SYSTEM privileges required; user interaction is not needed. The fix is patch ALPS05863018 (Issue ID: ALPS05863018). Exploitati...

CVE-2022-20247

CVE-2022-20247 is reported as a media processing issue in Android 13 where an out-of-bounds read due to a heap buffer overflow could allow remote information disclosure without user interaction. Documents consistently tie the vulnerability to Android 13 and the Media component, with CVSSv3.1 base...

CVE-2022-20257

CVE-2022-20257 affects Android 13 Bluetooth by allowing pairing of a display-only device without PIN confirmation due to a logic error in the Bluetooth code. This enables local privilege escalation with no additional execution privileges required and no user interaction. The issue is documented a...

CVE-2022-20274

In Android 13, CVE-2022-20274 affects the Keyguard component where a missing permission check could enable local escalation of privilege and prevent screen timeout. Exploitation requires local access with low privileges and no user interaction, potentially compromising confidentiality, integrity,...

CVE-2022-36845

CVE-2022-36845 corresponds to a heap-based overflow in the MHW_RECOG_LIB_INFO function of libSDKRecognitionText.spensdk.samsung.so. The vulnerability affects versions prior to Samsung SMR Sep-2022 Release 1. Root cause is a heap overflow in MHW_RECOG_LIB_INFO, which can lead to a memory access fa...

CVE-2022-38679

CVE-2022-38679 affects the music service where a missing permission check could allow a local denial of service without extra privileges. The CVE entries (NVD, PRION, PRiON, CNNVD, CVELIST, VULNRICHMENT) consistently describe a local impact due to insufficient authorization in the music service, ...

CVE-2022-38687

CVE-2022-38687 describes a missing permission check in the messaging service, enabling local denial of service with no additional privileges. The available documents identify the affected component as the messaging service and note that the impact is local DoS; no exploitation details, affected p...

CVE-2022-39082

CVE-2022-39082 describes a missing permission check in a network service leading to local privilege escalation requiring System execution privileges. Connected sources reference a UNISOC chipset context and confirm the local-access risk, with CVSSv3.1 metrics indicating Local access, privileges r...

CVE-2022-39096

CVE-2022-39096: A missing permission check in the power management service is documented, potentially allowing setup of the service with no additional execution privileges. Affected context across multiple sources centers on a local-privilege scenario with high impact (confidentiality, integrity,...

CVE-2022-39097

CVE-2022-39097 concerns a missing permission check in the power management service. Root cause described as allowing setup with no additional execution privileges. CVSS v3.1 score 7.8 (HIGH) with LOCAL, LOW complexity, LOW privileges required; impacts on confidentiality, integrity, and availabili...

CVE-2022-39102

CVE-2022-39102 concerns a missing permission check in the power management service, potentially allowing setup without additional privileges. The vulnerability is described as local, with low attack complexity and high impact across confidentiality, integrity, and availability (CVSS v3.1 base sco...

CVE-2022-39882

CVE-2022-39882 is a heap overflow in the sflacf_fal_bytes_peek function of the libsmat.so library, prior to Samsung SMR Nov-2022 Release 1. The vulnerability allows a local attacker to execute arbitrary code. Affected component is the libsmat.so library; the root cause is a heap overflow in the s...

CVE-2022-39894

CVE-2022-39894 affects Samsung Phone’s ContactListStartActivityHelper. The issue is an improper access control that can expose sensitive information via an implicit intent in versions prior to the SMR Dec-2022 Release 1. Public sources (NVD/Red Hat/CNNVD/PT-Security) describe the vulnerability as...

CVE-2022-47328

CVE-2022-47328 concerns a vulnerability in a WLAN driver (Qualcomm chip family in several reports) where a missing permission check enables potential local information disclosure. The Public documents consistently describe the issue as a local information disclosure due to insufficient privilege ...

CVE-2022-47454

CVE-2022-47454 affects the UNISOC/WLAN chipset’s driver, where a missing parameter check in the WLAN module can cause a local denial-of-service condition in wlan services. The issue stems from insufficient input validation in the WLAN driver path, enabling a configuration/state input to trigger a...

CVE-2022-48244

CVE-2022-48244 affects UNISOC chipsets’ audio service, with a missing permission check as the root cause. This could enable local escalation of privilege with no additional execution privileges, aligning with the CVSS 3.1 base metrics (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.8). Exploit...

CVE-2022-48373

The CVE-2022-48373 entry concerns a local out-of-bounds write in the UNISOC/tee service due to a missing bounds check, leading to local denial of service with SYSTEM privileges. Public references (NVD, Red Hat, CVE list, vuln enrichment) confirm the same root cause and impact, but exploitation st...

CVE-2022-48450

CVE-2022-48450 : Affects Unisoc Bluetooth service. The issue is a missing parameter check in the Bluetooth service, which could allow a local denial of service and require system execution privileges to exploit. The NVD notes a Medium severity (CVSS 3.1: 4.4) with local attack vector and high pri...

CVE-2023-20646

Summary: CVE-2023-20646 affects the MediaTek ril module, with a vulnerability in a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure and, under the conditions stated, system-level execution privileges are implied. No user interaction is require...

CVE-2023-20711

CVE-2023-20711 affects the keyinstall component and describes a possible out-of-bounds read due to a missing bounds check, enabling local information disclosure with system privileges needed. Exploitation details are not specified in the provided documents; user interaction is not required. The p...

CVE-2023-20727

CVE-2023-20727 affects the wlan component in MediaTek chips, with an out-of-bounds read caused by a missing bounds check. According to the records, this may lead to local information disclosure and potentially system-level execution privileges, with no user interaction required. Exploitation deta...

CVE-2023-20806

CVE-2023-20806 affects the MediaTek chipset-embedded hcp module, where a missing bounds check can cause an out-of-bounds write. This can lead to local escalation of privilege with System execution privileges required, and no user interaction is needed for exploitation. The issue is tied to patch ...

CVE-2023-20823

CVE-2023-20823 affects the cmdq component and is caused by an incorrect status check that enables an out-of-bounds read. The vulnerability could allow local denial of service with SYSTEM privileges, and exploitation does not require user interaction. A patch is referenced as ALPS08021592 (Issue I...