CVE-2023-20831

The CVE-2023-20831 issue affects the gps component and is described as an out-of-bounds write caused by a missing bounds check. The underlying effect is local escalation of privilege with SYSTEM execution privileges required, and exploitation does not require user interaction. The available docum...

CVE-2023-21234

CVE-2023-21234 is a Wear OS/Android System vulnerability involving a missing permission check in the launchConfirmationActivity of ChooseLockSettingsHelper.java that could allow enabling developer options without entering the lockscreen PIN. This enables a local escalation of privilege with no ex...

CVE-2023-21388

CVE-2023-21388 affects Google Android, specifically the Settings component, where a missing permission check can enable a local escalation of privilege without extra execution privileges or user interaction. The vulnerability is categorized as EoP with a high impact on confidentiality, integrity,...

CVE-2023-30936

CVE-2023-30936 affects the telephony service where a missing permission check can lead to local information disclosure without extra execution privileges. Concrete references in trusted sources indicate impact on UNISOC chipsets (e.g., various SC and T-series models) with local access required an...

CVE-2023-32811

CVE-2023-32811 affects the connectivity system driver. The root cause is an out-of-bounds write due to improper input validation, enabling local escalation to SYSTEM with no user interaction. Exploitation status is not fully detailed in the provided documents, but a patch (Patch ID: ALPS07929848;...

CVE-2023-32821

CVE-2023-32821 relates to MediaTek chips where a vulnerability in the video module allows an out-of-bounds write due to a permissions bypass. This could enable local escalation to SYSTEM privileges without user interaction. A patch is identified as ALPS08013430 (Issue ALPS08013433). Exploitation ...

CVE-2023-32878

CVE-2023-32878 affects the battery module in MediaTek chips, where a missing bounds check can cause information disclosure. The vulnerability permits local information disclosure with system execution privileges required, and no user interaction is needed. A patch is identified (ALPS08308070; ALP...

CVE-2023-40643

CVE-2023-40643 affects the Messaging component. The root cause is a missing permission check, which could allow local information disclosure without requiring additional execution privileges. The CVSS details indicate a Local attack vector, Low attack complexity, Privileges required: Low, with Co...

CVE-2023-42633

The CVE-2023-42633 entry concerns a vulnerability in validationtools where a missing permission check can lead to local information disclosure without requiring additional privileges. The issue is documented across multiple sources, consistently describing a local information disclosure impact du...

CVE-2023-42637

CVE-2023-42637 concerns the validationtools component, where a missing permission check could allow local information disclosure without additional execution privileges. The available connected documents confirm the issue but do not provide concrete product/version mappings, exploit details, or a...

CVE-2023-42653

CVE-2023-42653 affects the faceid service in UNISOC chipsets. The root cause is a missing bounds check that enables an out-of-bounds write, potentially causing a local denial of service with no additional execution privileges. According to the provided documents, the issue is a local impact (AV:L...

CVE-2023-44126

The CVE-2023-44126 issue concerns the Android Call management component (com.android.server.telecom) patched by LG. The vulnerability arises because LG’s patch sends a large number of LG-owned implicit broadcasts that disclose sensitive telephony data to all third-party apps on the same device. T...

CVE-2024-20087

In vdec, there is an out-of-bounds write caused by a missing bounds check that could lead to local privilege escalation requiring System execution privileges. User interaction is not needed for exploitation. Patch ID: ALPS08932916; Issue ID: MSV-1550. References and related notes across multiple ...

CVE-2024-20097

CVE-2024-20097 concerns the vdec component in MediaTek chips, with an out-of-bounds read due to a missing bounds check. This could lead to local information disclosure and system-level privileges as stated in multiple sources. Exploitation details (e.g., affected versions or vectors) are not prov...

CVE-2024-20130

The CVE-2024-20130 entry concerns the MediaTek MT8796 Power component. A missing bounds check can trigger an out-of-bounds write, enabling local escalation of privilege with SYSTEM execution privileges required. No user interaction is needed. The vulnerability is documented with Patch ID ALPS0919...

CVE-2024-20134

A security vulnerability exists in MediaTek Chipsets (specifically within the ril component) caused by a missing bounds check . This flaw allows for a possible out-of-bounds write , which could result in a local escalation of privilege requiring System execution privileges. Exploitation does not ...

CVE-2024-39430

The CVE-2024-39430 issue affects the faceid service, described as an out-of-bounds write caused by a missing bounds check. The practical impact is local denial of service with no additional execution privileges required. Connected PT-2024-28491 notes affected versions are not specified and provid...

CVE-2025-48545

CVE-2025-48545 affects Android’s AccountManagerService.isSystemUid in AccountManagerService.java, enabling a confused deputy to let an app access privileged APIs. This constitutes local privilege escalation with no additional execution privileges and no user interaction required. Public details i...

CVE-2026-0046

Technical details are not publicly available in the provided connected documents beyond the general CVE-2026-0046 description (InputInterceptor/Letterbox.java, tapjacking/overlay scenario). Monitor for updates.

CVE-2013-6271

CVE-2013-6271 affects Android 4.0–4.3; a vulnerability in com.android.settings.ChooseLockGeneric allows an unprivileged app to bypass restrictions and remove the device lock by invoking updateUnlockMethodAndFinish with PASSWORD_QUALITY_UNSPECIFIED. Exploits/PoC exist (CRT-RemoveLocks; Metasploit ...

CVE-2013-6792

Google Android prior to 4.4 contains an APK Signature Security Bypass vulnerability. The issue is cited across multiple sources (NVD entry CVE-2013-6792, Red Hat advisory, CVE listings) and is associated with a signature bypass in APK handling. The CIRCL feed notes an exploit entry, indicating ex...

CVE-2014-7954

The CVE-2014-7954 entry concerns Android 4.4.4 where the MTP path traversal vulnerability lies in MtpServer.cpp (doSendObjectInfo). The issue allows physically proximate attackers connected to the device to upload files outside the sdcard by crafting an MTP request with a .. in the name parameter...

CVE-2014-9777

The CVE-2014-9777 entry concerns a privilege-escalation flaw in the Qualcomm msm video driver. Specifically, vid_dec_set_meta_buffers in drivers/video/msm/vidc/common/dec/vdec.c does not validate the number of buffers on Android devices (Nexus 5 and Nexus 7, 2013). Impact is local privilege escal...

CVE-2014-9865

CVE-2014-9865 affects Android on Nexus 5 and Nexus 7 (2013) due to improper input restriction in drivers/misc/qseecom.c within Qualcomm components, enabling privilege escalation via a crafted application. Affected description notes elevation of privilege through user-space input, linked to Androi...

CVE-2014-9866

CVE-2014-9866 affects Qualcomm MSM camera driver on Nexus 5/Nexus 7 (2013) running Android with pre-2016-08-05 patch levels. The vulnerable file is drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c, where a parameter is not validated, enabling elevation of privilege via a crafted applic...

CVE-2014-9876

CVE-2014-9876 affects Android with Qualcomm components on Nexus 5/5X/6/6P/7 (2013). The vulnerability is in drivers/char/diag/diagfwd.c, where mishandling of certain integer values allows privilege escalation via a crafted application (Android internal bug 28767796; Qualcomm CR483408). Exploitati...

CVE-2014-9878

CVE-2014-9878 affects Android on Nexus 5 with the Qualcomm MMC component. The vulnerable code is drivers/mmc/card/mmc_block_test.c in Qualcomm components, where kernel-space buffer addresses are not rejected. This allows a local attacker with a crafted application to gain privileges. The issue is...

CVE-2014-9942

CVE-2014-9942 affects the boot path in all Android releases from CAF that use the Linux kernel. The root cause is a Use of Uninitialized Variable in the boot code, which could lead to memory corruption or unpredictable behavior. The NVD CVSSv3 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a...

CVE-2015-3879

CVE-2015-3879 affects the Android Media Player Framework (Android 5.1.1 LMY48T and earlier). The issue allows an attacker via a crafted application to gain privileges in mediaserver through memory corruption in media processing paths. Connected sources frame this as an elevation-of-privilege vuln...

CVE-2015-8507

The CVE-2015-8507 entry concerns a memory corruption vulnerability in Android’s mediaserver. Connected sources describe affected software as Android mediaserver running on Android 6.0 (and older) where a crafted media file can be used by a remote attacker to execute arbitrary code or cause a deni...

CVE-2015-8892

CVE-2015-8892 affects the Qualcomm components in Android on Nexus 5X and 6P, where platform/msm_shared/boot_verifier.c can bypass intended access restrictions by using a digest with trailing data. The issue pertains to Android versions prior to 2016-07-05 and is referenced in Android/Qualcomm bug...

CVE-2015-9033

CVE-2015-9033 is an Android CAF/Linux kernel issue where a QTEE system call fails to validate a pointer. Reported as a local vulnerability with high impact (confidentiality, integrity, availability) and requiring user interaction. Public references describe the root cause as pointer validation fa...

CVE-2016-0804

CVE-2016-0804 affects Android mediaserver’s NuPlayer::GenericSource.cpp in Android 5.x up to 5.1.1 and 6.x up to 2016-02-01. The root cause is improper management of the mDrmManagerClient object, enabling a remote attacker to execute arbitrary code or cause memory corruption via a crafted media f...

CVE-2016-10299

CVE-2016-10299 is an elevation of privilege vulnerability in Qualcomm closed‑source components used by Android, affecting the Android kernel. Reported impact is high/critical (CVSS v3 base score 9.8) with network attack vector, no user interaction required, and likely requires no privileges. The ...

CVE-2016-11052

This CVE affects Samsung mobile devices running Lollipop (5.0/5.1) and involves memory corruption in je_free() within libQjpeg.so (Qt 5.5’s Qjpeg). The root cause is parsing a malformed JPEG file, leading to potential memory corruption in affected components. Connected documents confirm the issue...

CVE-2016-2448

CVE-2016-2448 affects Android mediaserver’s NuPlayerStreamListener.cpp (NuPlayer in mediaserver). The issue is improper validation of entry data structures, enabling a local attacker to escalate privileges to Signature or SignatureOrSystem via a crafted app. Affected are Android 4.x before 4.4.4,...

CVE-2016-2469

CVE-2016-2469 is an elevation of privilege vulnerability in the Qualcomm sound driver affecting Android on Nexus devices (pre-2016-06-01). The issue originates in the Qualcomm sound driver used by Android and could allow a local attacker, via a crafted application, to gain kernel-level privileges...

CVE-2016-3799

CVE-2016-3799 is a privilege-escalation flaw in the MediaTek video driver on Android One devices, present in Android builds prior to 2016-07-05. An attacker could exploit a crafted application to gain elevated privileges within the device. The vulnerability affects MediaTek video driver component...

CVE-2016-3816

CVE-2016-3816 : Information disclosure in the MediaTek display driver on Android One devices, prior to 2016-07-05. A crafted application can access sensitive data via Mediaserver/display driver interaction. No exploitation details are provided beyond the Android bug reference. Mitigation: apply t...

CVE-2016-3860

CVE-2016-3860 affects the Qualcomm sound driver in Android, specifically the file sound/soc/msm/qdsp6v2/audio_calibration.c. The vulnerability allows a crafted application to disclose sensitive information due to an information-disclosure flaw in the Qualcomm sound device on Nexus 5X, Nexus 6P, a...

CVE-2016-3918

CVE-2016-3918 affects AOSP Mail’s email/provider/AttachmentProvider.java. The issue arises in Android versions 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, 6.x up to 2016-10-01, and 7.0 up to 2016-10-01, where certain values are not validated as integers, enabling a local attacker to re...

CVE-2016-3928

CVE-2016-3928 concerns the MediaTek video driver in Android prior to the 2016-10-05 patch level. The issue is an elevation of privilege: a local, crafted application could gain elevated privileges. The entry explicitly notes Android internal bug 30019362 and MediaTek internal bug ALPS02829384. No...

CVE-2016-3935

Concretely documented vulnerability: CVE-2016-3935 is an integer-overflow flaw in the Qualcomm cryptographic engine driver (drivers/crypto/msm/qcedev.c) that affects Android on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices. Root cause is multiple integer overflows in qcedev.c, which can en...

CVE-2016-5349

Technical details for CVE-2016-5349 are not provided in the connected documents. Public disclosures contain general descriptions only; no concrete product/vendor/version/root-cause or fix information is available here. Monitor for updates from official advisories.

CVE-2016-5857

The CVE-2016-5857 issue affects the Qualcomm SPCom driver in Android, where Android kernels prior to 7.0 allow local users to execute arbitrary code in kernel context via a crafted application. The vulnerability originates from the SPCom driver and enables a local escalation of privilege with com...

CVE-2016-6692

CVE-2016-6692 affects the Qualcomm MDSS driver in Android, specifically the mdss_mdp_pp.c component. The defect allows a denial of service (invalid pointer access) and possibly unspecified other impact via unknown vectors, tied to Qualcomm internal bug CR 1004933. The vulnerability is described f...

CVE-2016-6702

CVE-2016-6702 describes a remote code execution vulnerability in the libjpeg library used by Android. The issue allows an attacker to run arbitrary code in the context of an unprivileged process by feeding a specially crafted file. Affected Android versions are 4.x prior to 4.4.4, 5.0.x prior to ...

CVE-2016-6725

CVE-2016-6725 is a remote-code-execution vulnerability in the Qualcomm crypto driver affecting Android before the 2016-11-05 patch level. The Android kernel context could be compromised by a remote attacker, with CVSS-style impact described as critical (kernel context, remote exploit). The vulner...

CVE-2016-6738

CVE-2016-6738 is an elevation of privilege vulnerability in the Qualcomm crypto engine driver for Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. The description and related records...

CVE-2016-6742

CVE-2016-6742 describes an elevation of privilege in the Synaptics touchscreen driver on Android prior to 2016-11-05, enabling a local malicious app to execute arbitrary code in the kernel if it can compromise a privileged process. Affected: Android devices with affected Synaptics driver. Root ca...