CVE-2018-9410

CVE-2018-9410 describes an out-of-bounds read in the Android Framework via FontUtils.cpp -> analyzeAxes, causing local information disclosure with no extra privileges and no user interaction. The connected Android bulletin lists CVE-2018-9410 under the Framework section with High severity, not...

CVE-2018-9417

The CVE-2018-9417 entry affects the Linux kernel USB HID gadget driver (f_hid.c). In functions f_hidg_read and hidg_disable, there is a use-after-free caused by improper locking, enabling local escalation of privilege with no user interaction required. The description states the impact as local p...

CVE-2018-9435

CVE-2018-9435 affects the Android Pixel/Nexus ecosystem (System component). The issue stems from a missing bounds check in gatt_process_error_rsp of gatt_cl.cc, enabling a possible out-of-bounds read leading to local information disclosure without user interaction. The Android Pixel/Nexus securit...

CVE-2018-9450

CVE-2018-9450 affects Android via a missing bounds check in avrc_proc_vendor_command (avrc_api.cc), causing an out-of-bounds write that could enable remote code execution without user interaction. Affected Android versions: 6.0–6.0.1, 7.0–7.1.2, 8.0–8.1. The root cause is the missing bounds check...

CVE-2018-9481

CVE-2018-9481 : The vulnerability is in the Bluetooth stack, specifically in the function bta_hd_set_report_act of bta_hd_act.cc. An integer overflow can trigger an out-of-bounds read, enabling remote information disclosure through the Bluetooth service without extra privileges or user interactio...

CVE-2018-9505

CVE-2018-9505 affects Android Bluetooth code (mca_ccb_hdl_req in mca_cact.cc) causing an out-of-bounds read due to a missing bounds check. The Android bulletin lists this as CVE-2018-9505 (Framework, ID) with High severity and notes affected patch levels, including 2018-10-01 and 2018-10-05 updat...

CVE-2019-1997

CVE-2019-1997 affects Android’s random.c: In random_get_bytes, an insecure default value degrades randomness, enabling local information disclosure over an insecure wireless connection with no user interaction. Affected Android versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9. Exploitation context: netwo...

CVE-2019-20552

CVE-2019-20552 concerns FRP (Factory Reset Protection) bypass on Samsung mobile devices running Android P (9.0) via an RCS call. Connected sources corroborate a FRP bypass vulnerability affecting Samsung devices; one CNVD entry characterizes the underlying issue as an input validation error, whil...

CVE-2019-20607

The CVE-2019-20607 issue affects Samsung mobile devices on N(7.x), O(8.x) and P(9.0) platforms (MSM8996/8998, Exynos7420/7870/8890/8895). A heap overflow in the keymaster Trustlet allows writing to TEE memory and leads to arbitrary code execution. No exploitation details or explicit patch/version...

CVE-2019-20619

CVE-2019-20619 affects Samsung mobile devices running Android P (9.0) with Secure Startup, where keyboard suggested words may be leaked during startup. Samsung ID SVE-2019-13773. No public exploitation details or fixes are provided in the connected documents.

CVE-2019-2085

Summary: CVE-2019-2085 is an out-of-bounds write in libxaac on Android 10 due to a missing bounds check, enabling remote code execution with user interaction required. The issue is tied to the Android 10 libxaac/Android-10 stack, with a high impact and network attack vector per CVE details. Affec...

CVE-2019-2135

CVE-2019-2135 affects Android systems and is due to a missing bounds check in Mfc_Transceive of phNxpExtns_MifareStd.cpp, causing an out-of-bounds read. This could lead to local information disclosure with no extra execution privileges required; exploitation requires user interaction. Affected An...

CVE-2019-2137

CVE-2019-2137 affects Android 9 (Pie); the issue is in TelecomManager.java endCall() where a missing permission check allows a local DoS that can block access to Emergency Services with user execution privileges, and does not require user interaction. Exploitation details are not provided in the ...

CVE-2019-2196

CVE-2019-2196 describes a SQL injection in Android's Download Provider, exploitable locally to disclose information without extra privileges. Affected: Android 8.0–10; vulnerability occurs in the query sort parameter, enabling information disclosure. Root cause: improper handling of sort paramete...

CVE-2019-2207

CVE-2019-2207 affects Android devices (Android 8.0–10) and is tied to a flaw in the nfa_hci_handle_admin_gate_rsp path of nfa_hci_act.cc. The issue is an out-of-bounds write caused by missing bounds checks in this function, enabling local elevation of privilege with system execution privileges re...

CVE-2019-9253

CVE-2019-9253 affects Android 10 KeyStore: a missing strongbox flag allows symmetric keys to be stored in the TEE instead of the strongbox, enabling local information disclosure with System privileges required. No user interaction needed. Exploitation details are not provided in the supplied docu...

CVE-2019-9315

CVE-2019-9315 affects the Android 10 Media Framework component libhevc, where a missing variable initialization creates a condition for information disclosure. The issue could permit remote disclosure without additional execution privileges; exploitation requires user interaction. The CVSS data i...

CVE-2020-0010

CVE-2020-0010 affects the FPC Fingerprint TEE in the Android kernel. The root cause is an out-of-bounds write due to a missing bounds check in fpc_ta_get_build_info within fpc_ta_kpi.c, enabling local escalation of privilege with SYSTEM-level privileges; no user interaction is required. Public re...

CVE-2020-0026

CVE-2020-0026 affects Android 8.0–10 via Parcel::continueWrite in Parcel.cpp, where a use-after-free causes memory corruption and local elevation of privilege without user interaction. Documented impact is elevated privileges in a local context; no remote code execution details are provided. Affe...

CVE-2020-0167

CVE-2020-0167 affects Android 10 with an out-of-bounds read in ResourceTypes.cpp caused by an integer overflow, leading to potential local information disclosure. Exploitation requires user interaction, and the issue is classified as Moderate severity for the framework in the Pixel bulletin. Affe...

CVE-2020-0221

CVE-2020-0221 affects Airbrush’s scratch memory allocator in the Android kernel. The root cause is a numeric overflow in the allocator, which could cause the next allocation to return a pointer within a previously allocated region, enabling improper memory access and elevation of privilege on aff...

CVE-2020-0270

CVE-2020-0270 affects Tremolo in Android-11, with an out-of-bounds read due to a missing bounds check that could lead to remote information disclosure. Exploitation requires user interaction; impact is information disclosure without extra execution privileges. This entry is supported by multiple ...

CVE-2020-0279

CVE-2020-0279 affects Android 11 via the AAC parser. The vulnerability is an out-of-bounds read caused by a missing bounds check, leading to remote information disclosure with no full compromise; exploitation requires user interaction. The issue is documented in Android 11 release notes under the...

CVE-2020-0327

CVE-2020-0327 affects Android 11: a missing permission check in core networking could allow local information disclosure of app network usage. Exploitation reportedly requires user execution but no user interaction, and the impact is local information disclosure with HIGH confidentiality impact p...

CVE-2020-12746

CVE-2020-12746 affects Samsung mobile devices (Exynos) on O(8.X), P(9.0), and Q(10.0). The issue is a heap-based buffer overflow that lets an attacker bypass the Secure Bootloader protection mechanism and execute arbitrary code. The Samsung internal ID is SVE-2020-16712 (May 2020). Connected sour...

CVE-2020-12752

CVE-2020-12752 affects Samsung mobile devices running P(9.0)/Q(10.0) with TEEGRIS. The issue allows attackers to determine user credentials via a brute-force attack against the Gatekeeper Trustlet, as described in multiple sources (Samsung ID SVE-2020-16908). The attack surface is the Gatekeeper ...

CVE-2020-13829

CVE-2020-13829 affects Samsung mobile devices running Android P (9.0) and Q (10.0). The issue enables attackers to disable SEAndroid protection within the RKP (Recovery Kernel Patch). Root cause: SEAndroid enforcement can be turned off in RKP, per the available descriptions. Impact: disabling SEA...

CVE-2021-0359

In netdiag, a bug causes an out-of-bounds write due to a missing bounds check, enabling local escalation of privilege with System execution privileges required. Affected software is Android (Android-10, Android-11). The issue is baseline described across multiple sources (NVD/Red Hat/PRION, etc.)...

CVE-2021-0375

CVE-2021-0375 affects Android 11 and is tied to VoiceInteractionManagerService.java: onPackageModified could change default apps due to an insecure default value, enabling local elevation of privilege without extra privileges. Exploitation is described as requiring no user interaction. The issue ...

CVE-2021-0382

CVE-2021-0382 affects Android 11 where SliceManagerService.java’s checkSlicePermission allows local information disclosure due to an incorrect permission check. Exploitation would be local (no user interaction) and could expose partial to sensitive information as defined in the CVE entry. Red Hat...

CVE-2021-0388

CVE-2021-0388 affects Android 11 and is tied to the ImsPhoneCallTracker.java onReceive path, where a misappropriation of data usage can occur due to an incorrect broadcast handler. This can enable local escalation of privilege by attributing video‑call data to the wrong app, without requiring any...

CVE-2021-0406

CVE-2021-0406 is associated with MediaTek’s cameraisp on Android 10 and 11, where a missing bounds check can cause an out-of-bounds write. The flaw enables local escalation of privileges to System level with no user interaction required. Affected component: cameraisp image processor; root cause: ...

CVE-2021-0496

CVE-2021-0496 is an Android memory management driver vulnerability caused by a use-after-free leading to local privilege escalation. Affected: Android devices with the memory management driver. Impact: local code execution with high integrity/availability impact; attacker requires local access, n...

CVE-2021-0518

CVE-2021-0518 affects Android 13, where a missing permission check in Wi‑Fi can leak location‑sensitive data, enabling local information disclosure without extra execution privileges. Root cause: lack of access control around Wi‑Fi data exposure. Impact is information disclosure with no user inte...

CVE-2021-0617

CVE-2021-0617 affects MediaTek’s ape extractor. The issue is a heap-buffer-overflow–induced out-of-bounds read in the extractor, leading to local information disclosure without privilege or user interaction. Patch ALPS05561391/ALPS05561391 is referenced as remediation. No exploitation details are...

CVE-2021-0678

CVE-2021-0678 affects the MediaTek Apusys component, where a missing bounds check enables an out-of-bounds write. This could allow local escalation of privilege with System execution privileges and no user interaction required. The Public references indicate Patch ID ALPS05672107 and Issue ID ALP...

CVE-2021-0903

CVE-2021-0903 concerns the MediaTek Apusys component, where a missing bounds check can trigger an out-of-bounds write. The condition enables local escalation of privilege with SYSTEM execution rights and does not require user interaction. Affected material mentions Apusys; Red Hat and other sourc...

CVE-2021-25501

CVE-2021-25501 involves an improper access control flaw in SCloudBnRReceiver within the SecTelephonyProvider. The root cause allows an untrusted application to call some protected providers, with impact described as limited integrity impact and no confidentiality/availability impact per CVSS metr...

CVE-2021-25510

CVE-2021-25510 concerns an improper validation in FilterProvider, prior to Samsung SMR Dec-2021 Release 1, enabling local arbitrary code execution. Affected context is Samsung mobile software; vulnerability is localized with potential full impact to confidentiality, integrity, and availability as...

CVE-2021-25513

CVE-2021-25513 affects the Apps Edge application prior to Samsung SMR Dec-2021 Release 1. The root cause is improper privilege management, enabling unauthorized access to certain lockscreen data. Impact is limited to exposure of device data on the lockscreen; CVSS scores (NVD 2.4/3.1, Low) reflec...

CVE-2022-20294

CVE-2022-20294 affects Google Android 13. The issue stems from a missing permission check in Content, allowing local information disclosure of accounts present on the device. Exploitation would require local access with no user interaction (per the description), and the CVSS score is 5.5 (Medium)...

CVE-2022-20300

CVE-2022-20300 affects Android 13, where a missing permission check in the Content component allows an attacker with local access to determine whether a given account exists on the device, causing local information disclosure. The issue requires LOW privileges and no user interaction (local attac...

CVE-2022-20307

Summary (CVE-2022-20307) : In Android 13, AlarmManagerService allows a side-channel leakage that can reveal whether an app is installed without query permissions, enabling local information disclosure with no extra execution privileges and no user interaction. Affected : Android 13 (AlarmManagerS...

CVE-2022-32616

CVE-2022-32616 affects the isp component in MediaTek-based devices, causing an out-of-bounds write due to uninitialized data. This can enable local escalation of privilege with System execution privileges required, and no user interaction is needed. The entry lists patch ALPS07341258 / Issue ALPS...

CVE-2022-32629

CVE-2022-32629 affects the isp component and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local escalation of privilege with system execution privileges required; exploitation does not require user interaction. The entry lists a patch reference: ALPS07...

CVE-2022-33695

The CVE-2022-33695 entry concerns Samsung InputManagerService on Samsung Android devices. The vulnerability arises from improper modification permissions in InputManagerService, allowing an attacker to access the service without authorization. Affected component: InputManagerService (Binder-like ...

CVE-2022-38675

CVE-2022-38675 concerns a defect in the GPU driver where a missing bounds check enables a local out-of-bounds write, potentially causing a local denial of service in the kernel. The description across multiple sources agrees on the kernel impact and local attack vector, with CVSS v3.1 metrics ind...

CVE-2022-39856

CVE-2022-39856 : Improper access control in the imsservice application prior to Samsung SMR Oct-2022 Release 1 allows local attackers to access call information. Affects the imsservice component; root cause is access control weakness enabling local disclosure. Impact is information exposure (call...

CVE-2022-42758

In CVE-2022-42758, multiple sources confirm a vulnerability in the WLAN driver (specifically a missing bounds check in the WLAN driver) that can cause local denial of service in WLAN services. Affected component is the WLAN driver (Unisoc chipset context appears in related tooling); root cause is...

CVE-2022-47333

The CVE-2022-47333 entry concerns a vulnerability in the wlan driver where a missing permission check could enable local information disclosure. Affected component: WLAN driver; root cause: insufficient permission validation. Impact: local information disclosure (confidentiality impact high; inte...