CVE-2019-20772

CVE-2019-20772 affects LG mobile devices running Android 7.0–9.0 where the Account subsystem permits an authorization bypass. The vendor-specific LG advisory (LVE-SMP-190007) and Red Hat/NVD entries corroborate the same description. Root cause and exact vulnerable component are not detailed in th...

CVE-2019-2085

Summary: CVE-2019-2085 is an out-of-bounds write in libxaac on Android 10 due to a missing bounds check, enabling remote code execution with user interaction required. The issue is tied to the Android 10 libxaac/Android-10 stack, with a high impact and network attack vector per CVE details. Affec...

CVE-2019-2116

CVE-2019-2116 affects Android: a possible out-of-bounds read in save_attr_seq of sdp_discovery.cc could lead to remote information disclosure without user interaction. Documented impact is information disclosure (confidentiality) with no execution privileges required. Affected Android versions in...

CVE-2019-2137

CVE-2019-2137 affects Android 9 (Pie); the issue is in TelecomManager.java endCall() where a missing permission check allows a local DoS that can block access to Emergency Services with user execution privileges, and does not require user interaction. Exploitation details are not provided in the ...

CVE-2019-9253

CVE-2019-9253 affects Android 10 KeyStore: a missing strongbox flag allows symmetric keys to be stored in the TEE instead of the strongbox, enabling local information disclosure with System privileges required. No user interaction needed. Exploitation details are not provided in the supplied docu...

CVE-2019-9291

CVE-2019-9291 affects Android 10 Bluetooth with a remote code execution due to improper memory allocation in the Bluetooth stack. The vulnerability enables network-based exploitation requiring user interaction; CVSS indicates high impact (C/H/I/A) with network access and low attack complexity, an...

CVE-2019-9424

CVE-2019-9424 affects Android 10: a vulnerability in the Screen Lock where the setting to hide the unlock pattern can be ignored under certain conditions, causing information disclosure. The vulnerability is listed in Android 10 security release notes and has NVD scores of 4.3 (CVSS2) and 7.5 (CV...

CVE-2019-9431

CVE-2019-9431 describes a Bluetooth vulnerability in Android 10: a use-after-free leads to an out-of-bounds read, enabling remote information disclosure. The issue can disclose heap information and requires no user interaction, with potential system-level privileges needed for impact per public r...

CVE-2020-0017

CVE-2020-0017 is an information-disclosure flaw in the Android Framework where the primary user’s dictionary could be visible and modifiable by other local users. It affects Android 8.0–10 and requires no extra execution privileges, with exploitation requires user interaction. The Android 2020 se...

CVE-2020-0098

CVE-2020-0098 affects Android framework (ActivityStack.java) and enables a local elevation of privilege due to a confused deputy in navigateUpToLocked. The issue allows a local attacker to bypass permissions without extra execution privileges, with no user interaction required. Affected Android v...

CVE-2020-0109

CVE-2020-0109 affects Android 9–10 and relates to NotificationManagerService.java: in simulatePackageSuspendBroadcast there is a missing permission check, enabling local privilege escalation by crafting fake system notifications without extra execution privileges. Public references indicate the i...

CVE-2020-0113

CVE-2020-0113 is a Media framework information-disclosure vulnerability in Android 9–10. In Camera3OutputUtils.cpp, sendCaptureResult can trigger an out-of-bounds read due to a use-after-free, leading to local information disclosure without extra user interaction. Android bulletin 2020-06-01 clas...

CVE-2020-0131

CVE-2020-0131 affects Android 10 in the Media Framework’s MPEG4Extractor.cpp parseChunk path, where an out-of-bounds write can occur from incompletely initialized data. This vulnerability allows remote code execution via a network vector with the need for user interaction to exploit (per the CVE ...

CVE-2020-0145

CVE-2020-0145 affects Android 10, with a flaw in btm_simple_pair_complete in btm_sec.cc that can trigger an out-of-bounds read due to a missing bounds check. This could lead to local information disclosure on a device with System privileges, and exploitation requires no user interaction. The avai...

CVE-2020-0289

CVE-2020-0289 affects Android 11 in the PackageManager component, where a missing permission check allows local information disclosure across users without extra privileges or user interaction. The issue is described across multiple sources (NVD, Red Hat, CNVD, PRION, and national advisories) as ...

CVE-2020-13829

CVE-2020-13829 affects Samsung mobile devices running Android P (9.0) and Q (10.0). The issue enables attackers to disable SEAndroid protection within the RKP (Recovery Kernel Patch). Root cause: SEAndroid enforcement can be turned off in RKP, per the available descriptions. Impact: disabling SEA...

CVE-2020-13835

The CVE-2020-13835 issue affects Samsung mobile devices running O(8.x) with TEEGRIS, specifically involving the Gatekeeper Trustlet. The vulnerability stems from a brute-force weakness in the Trustlet that allows credential guessing, enabling a user credential brute-force attack. The issue is tie...

CVE-2020-25060

Technical details about CVE-2020-25060 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2020-25064

Technical details (affected products, vulnerable component, root cause, exploit information) are not provided in the connected documents. Monitor for updates from LG/Security advisories.

CVE-2021-0381

The CVE-2021-0381 issue affects Android 11 and is tied to DeviceStorageMonitorService.java (updateNotifications). It describes a possible permission bypass caused by an unsafe PendingIntent that can lead to local information disclosure without user interaction. The exploitable condition requires ...

CVE-2021-0406

CVE-2021-0406 is associated with MediaTek’s cameraisp on Android 10 and 11, where a missing bounds check can cause an out-of-bounds write. The flaw enables local escalation of privileges to System level with no user interaction required. Affected component: cameraisp image processor; root cause: ...

CVE-2021-0459

CVE-2021-0459 affects Google Android kernel code, specifically fts_driver_test_write in fts_proc.c. It is due to a missing bounds check, causing an out-of-bounds read that can disclose local information. Exploitation requires local access and does not require user interaction, with the potential ...

CVE-2021-0676

CVE-2021-0676 pertains to the geniezone driver, where an incorrect bounds check enables a possible out-of-bounds read . This could lead to local information disclosure with the attacker obtaining System execution privileges; exploitation requires no user interaction. Multiple sources (NVD, Red Ha...

CVE-2021-1040

CVE-2021-1040 describes an elevation-of-privilege vulnerability in Android where, in onCreate of BluetoothPairingSelectionFragment.java, a tapjacking/overlay attack could enable local escalation of privilege without requiring extra execution privileges. Affected products/versions include Android ...

CVE-2021-25410

The CVE-2021-25410 issue concerns Samsung CallBGProvider. Several connected sources confirm an Improper Access Control in CallBGProvider (pre-SMR JUN-2021 Release 1), enabling a local attacker to access arbitrary files with escalated privileges. Affected component: CallBGProvider; vulnerability t...

CVE-2021-25475

Summary of CVE-2021-25475 : The issue is a heap-based buffer overflow in the DSP kernel driver, before Samsung SMR Oct-2021 Release 1. This flaw can lead to arbitrary memory writes and code execution within the kernel context on affected Samsung devices. Affected component: DSP kernel driver. Roo...

CVE-2021-25516

CVE-2021-25516 affects Samsung Exynos baseband (prior to SMR Dec-2021 Release 1). An improper handling of exceptional conditions in the baseband’s RRC MeasurementReport allows an attacker to track a device’s location. Impact is described as location-tracking with high practicality on affected Sam...

CVE-2022-20018

CVE-2022-20018 concerns the seninf driver, with a reported information-disclosure issue caused by uninitialized data. This could lead to local information disclosure with SYSTEM privileges required; user interaction is not needed. The fix is patch ALPS05863018 (Issue ID: ALPS05863018). Exploitati...

CVE-2022-20019

CVE-2022-20019 affects the MediaTek libMtkOmxGsmDec component. The issue is an incorrect bounds check that may allow local information disclosure without requiring additional execution privileges; user interaction is not needed. The CVE description and Red Hat/NVD entries confirm the impact is li...

CVE-2022-20247

CVE-2022-20247 is reported as a media processing issue in Android 13 where an out-of-bounds read due to a heap buffer overflow could allow remote information disclosure without user interaction. Documents consistently tie the vulnerability to Android 13 and the Media component, with CVSSv3.1 base...

CVE-2022-20257

CVE-2022-20257 affects Android 13 Bluetooth by allowing pairing of a display-only device without PIN confirmation due to a logic error in the Bluetooth code. This enables local privilege escalation with no additional execution privileges required and no user interaction. The issue is documented a...

CVE-2022-36845

CVE-2022-36845 corresponds to a heap-based overflow in the MHW_RECOG_LIB_INFO function of libSDKRecognitionText.spensdk.samsung.so. The vulnerability affects versions prior to Samsung SMR Sep-2022 Release 1. Root cause is a heap overflow in MHW_RECOG_LIB_INFO, which can lead to a memory access fa...

CVE-2022-36846

CVE-2022-36846 is a heap-based overflow in the ConstructDictionary function of libSDKRecognitionText.spensdk.samsung.so, affecting versions prior to Samsung SMR Sep-2022 Release 1. The overflow can cause memory access faults (memory corruption). The issue is documented across multiple sources (NV...

CVE-2022-38679

CVE-2022-38679 affects the music service where a missing permission check could allow a local denial of service without extra privileges. The CVE entries (NVD, PRION, PRiON, CNNVD, CVELIST, VULNRICHMENT) consistently describe a local impact due to insufficient authorization in the music service, ...

CVE-2022-39082

CVE-2022-39082 describes a missing permission check in a network service leading to local privilege escalation requiring System execution privileges. Connected sources reference a UNISOC chipset context and confirm the local-access risk, with CVSSv3.1 metrics indicating Local access, privileges r...

CVE-2022-39096

CVE-2022-39096: A missing permission check in the power management service is documented, potentially allowing setup of the service with no additional execution privileges. Affected context across multiple sources centers on a local-privilege scenario with high impact (confidentiality, integrity,...

CVE-2022-39102

CVE-2022-39102 concerns a missing permission check in the power management service, potentially allowing setup without additional privileges. The vulnerability is described as local, with low attack complexity and high impact across confidentiality, integrity, and availability (CVSS v3.1 base sco...

CVE-2022-39882

CVE-2022-39882 is a heap overflow in the sflacf_fal_bytes_peek function of the libsmat.so library, prior to Samsung SMR Nov-2022 Release 1. The vulnerability allows a local attacker to execute arbitrary code. Affected component is the libsmat.so library; the root cause is a heap overflow in the s...

CVE-2022-39894

CVE-2022-39894 affects Samsung Phone’s ContactListStartActivityHelper. The issue is an improper access control that can expose sensitive information via an implicit intent in versions prior to the SMR Dec-2022 Release 1. Public sources (NVD/Red Hat/CNNVD/PT-Security) describe the vulnerability as...

CVE-2022-47328

CVE-2022-47328 concerns a vulnerability in a WLAN driver (Qualcomm chip family in several reports) where a missing permission check enables potential local information disclosure. The Public documents consistently describe the issue as a local information disclosure due to insufficient privilege ...

CVE-2022-47454

CVE-2022-47454 affects the UNISOC/WLAN chipset’s driver, where a missing parameter check in the WLAN module can cause a local denial-of-service condition in wlan services. The issue stems from insufficient input validation in the WLAN driver path, enabling a configuration/state input to trigger a...

CVE-2022-48373

The CVE-2022-48373 entry concerns a local out-of-bounds write in the UNISOC/tee service due to a missing bounds check, leading to local denial of service with SYSTEM privileges. Public references (NVD, Red Hat, CVE list, vuln enrichment) confirm the same root cause and impact, but exploitation st...

CVE-2022-48450

CVE-2022-48450 : Affects Unisoc Bluetooth service. The issue is a missing parameter check in the Bluetooth service, which could allow a local denial of service and require system execution privileges to exploit. The NVD notes a Medium severity (CVSS 3.1: 4.4) with local attack vector and high pri...

CVE-2023-20637

CVE-2023-20637 affects the ril component in MediaTek chips, with an out-of-bounds write caused by a missing bounds check. The issue could enable local escalation of privilege with System execution privileges required and no user interaction needed. Patch ALPS07628588/ALPS07628588 is referenced; n...

CVE-2023-20711

CVE-2023-20711 affects the keyinstall component and describes a possible out-of-bounds read due to a missing bounds check, enabling local information disclosure with system privileges needed. Exploitation details are not specified in the provided documents; user interaction is not required. The p...

CVE-2023-20727

CVE-2023-20727 affects the wlan component in MediaTek chips, with an out-of-bounds read caused by a missing bounds check. According to the records, this may lead to local information disclosure and potentially system-level execution privileges, with no user interaction required. Exploitation deta...

CVE-2023-20806

CVE-2023-20806 affects the MediaTek chipset-embedded hcp module, where a missing bounds check can cause an out-of-bounds write. This can lead to local escalation of privilege with System execution privileges required, and no user interaction is needed for exploitation. The issue is tied to patch ...

CVE-2023-20823

CVE-2023-20823 affects the cmdq component and is caused by an incorrect status check that enables an out-of-bounds read. The vulnerability could allow local denial of service with SYSTEM privileges, and exploitation does not require user interaction. A patch is referenced as ALPS08021592 (Issue I...

CVE-2023-20831

The CVE-2023-20831 issue affects the gps component and is described as an out-of-bounds write caused by a missing bounds check. The underlying effect is local escalation of privilege with SYSTEM execution privileges required, and exploitation does not require user interaction. The available docum...

CVE-2023-21234

CVE-2023-21234 is a Wear OS/Android System vulnerability involving a missing permission check in the launchConfirmationActivity of ChooseLockSettingsHelper.java that could allow enabling developer options without entering the lockscreen PIN. This enables a local escalation of privilege with no ex...