CVE-2022-48443

CVE-2022-48443 refers to a missing permission check in the telephony service, enabling local denial of service with no additional privileges. The available connected sources consistently describe the issue at the telephony service layer; some entries mention Unisoc chipsets as related affected pl...

CVE-2023-20646

Summary: CVE-2023-20646 affects the MediaTek ril module, with a vulnerability in a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure and, under the conditions stated, system-level execution privileges are implied. No user interaction is require...

CVE-2023-20718

CVE-2023-20718 affects the vcu module in MediaTek chip families. The root cause is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges required and no user interaction needed. The entry lists patch ALPS07645181/ALPS07645...

CVE-2023-20724

The CVE-2023-20724 entry concerns MediaTek Bluetooth implementations. A missing bounds check in the Bluetooth module enables an out-of-bounds read, leading to local escalation of privilege with System-level execution privileges; exploitation requires no user interaction. The vulnerability affects...

CVE-2023-20727

CVE-2023-20727 affects the wlan component in MediaTek chips, with an out-of-bounds read caused by a missing bounds check. According to the records, this may lead to local information disclosure and potentially system-level execution privileges, with no user interaction required. Exploitation deta...

CVE-2023-20749

The CVE-2023-20749 issue affects the swpm module in MediaTek chips, caused by a missing bounds check that enables an out-of-bounds write. This could lead to local escalation to SYSTEM privileges with no user interaction required. A patch is available (ALPS07780926/ALPS07780926). Exploitation stat...

CVE-2023-20775

CVE-2023-20775 describes a local out-of-bounds write in the display code due to a missing bounds check, enabling local privilege escalation with System rights; no user interaction required. Impacted hardware is reported as various MediaTek chips (per connected references), with a patch identified...

CVE-2023-20785

Summary: CVE-2023-20785 describes a potential out-of-bounds write in the audio component due to a missing bounds check, enabling local escalation of privilege to system execution level. The vulnerability is described with no user interaction required. Affected component: Audio subsystem (MediaTek...

CVE-2023-21234

CVE-2023-21234 is a Wear OS/Android System vulnerability involving a missing permission check in the launchConfirmationActivity of ChooseLockSettingsHelper.java that could allow enabling developer options without entering the lockscreen PIN. This enables a local escalation of privilege with no ex...

CVE-2023-21297

CVE-2023-21297 affects SEPolicy in Android, enabling a permissions bypass to access the factory MAC address. This can cause local information disclosure with System execution privileges required and does not require user interaction. The connected Red Hat, CNVD, and other sources reiterate the sa...

CVE-2023-21310

CVE-2023-21310 affects Android Bluetooth, described as an out-of-bounds write caused by a heap buffer overflow in the Bluetooth component. The vulnerability allows local elevation of privilege with System execution privileges and does not require user interaction. The provided documents confirm t...

CVE-2023-21320

CVE-2023-21320 concerns information disclosure via the Device Policy on Android. The issue enables an attacker to verify whether a specific admin app is registered on a device through side-channel information disclosure, resulting in local information disclosure with no additional execution privi...

CVE-2023-21360

CVE-2023-21360 affects Android Bluetooth and is characterized by an out-of-bounds write caused by improper input validation. The issue enables local elevation of privilege to System after exploitation, with no user interaction required. Public details consistently describe the vulnerability as a ...

CVE-2023-21368

CVE-2023-21368 affects Android’s Audio component, with a possible out-of-bounds read caused by a missing bounds check. The consequence is local information disclosure without requiring privileges; exploitation does not require user interaction. Multiple connected sources corroborate the issue, in...

CVE-2023-21378

CVE-2023-21378 : In Telecomm, a missing permission check enables silencing the ring for calls of secondary users, causing a local elevation of privilege with no additional execution privileges needed. Exploitation does not require user interaction. CVSSv3.1 base score is 7.8 (High), with local at...

CVE-2023-32876

CVE-2023-32876 involves the keyInstall function where a missing bounds check can cause information disclosure, requiring local privileges (PR:H) with no user interaction. Affected context appears to be media/SoC environments (MediaTek-related references appear across multiple connected sources), ...

CVE-2023-33881

Summary: CVE-2023-33881 describes a missing permission check in the telephony service that can cause local information disclosure without extra privileges. The issue is documented across multiple sources (NVD/Red Hat/CVE listing) with the same core impact: local information leakage, low attack co...

CVE-2023-40631

No public technical details are provided in the supplied documents for CVE-2023-40631 beyond the description of a missing permission check in Dialer causing local information disclosure; monitor for updates.

CVE-2023-44125

CVE-2023-44125 affects the Personalized service app (com.lge.abba). The issue is use of implicit PendingIntents without PendingIntent.FLAG_IMMUTABLE, which could enable an attacker’s app (with access to notifications) to hijack intents, intercept them, and then obtain permissions to content provi...

CVE-2024-20120

CVE-2024-20120 concerns a bound-check failure in KeyInstall that enables an out-of-bounds write, leading to local privilege escalation with SYSTEM-level execution privileges required and no user interaction needed. Multiple sources (NVD, Red Hat, CVE lists, and vuln enrichment) confirm the issue ...

CVE-2024-20134

CVE-2024-20134 affects the RIL (Radio Interface Layer) with a possible out-of-bounds write caused by a missing bounds check. The issue could enable local privilege escalation to System level and does not require user interaction for exploitation. A patch is referenced (ALPS09154589) with an inter...

CVE-2024-34664

CVE-2024-34664 concerns Samsung Knox Guard. The issue is an improper check for exception conditions in Knox Guard prior to SMR Oct-2024 Release 1, which could allow a physical attacker in a multi-user environment to bypass Knox Guard. Affected software is Knox Guard (pre-SMR Oct-2024 Release 1); ...

CVE-2024-39430

The CVE-2024-39430 issue affects the faceid service, described as an out-of-bounds write caused by a missing bounds check. The practical impact is local denial of service with no additional execution privileges required. Connected PT-2024-28491 notes affected versions are not specified and provid...

CVE-2025-20639

The CVE refers to MediaTek DA module’s out-of-bounds write caused by a missing bounds check, enabling local privilege escalation with physical access and requiring user interaction. Affected: DA component; Root cause: bounds-check omission. Impact: confidentiality, integrity, and availability rat...

CVE-2025-32320

CVE-2025-32320 affects Android System UI and describes a confused-deputy issue that can lead to local elevation of privilege: an attacker could view other users’ images without extra execution privileges or user interaction. Affected component is Android System UI; root cause is improper access c...

CVE-2026-0029

The CVE-2026-0029 entry concerns Google Android’s kernel code, specifically a logic error in __pkvm_init_vm in pkvm.c that may cause memory corruption and enable local privilege escalation without user interaction. The vulnerability is documented across multiple feeds (NVD/NCSC/CNVD/CVELIST) with...

CVE-2026-0081

CVE-2026-0081 concerns the Android NFC stack. The connected documents indicate a missing permission check in NFC that could allow spoofing an NFC event, enabling local escalation of privilege without any additional execution privileges and without user interaction. The exploitation details are no...

CVE-2026-28573

CVE-2026-28573 affects Android Wear OS via a Framework component vulnerability described as a local denial of service in AndroidManifest.xml due to a missing permission check. The CVE is characterized as high severity with a CVSSv4 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:I:H/CI:H/AI:H; impacts ...

CVE-2011-1352

The CVE-2011-1352 issue affects the PowerVR SGX driver used in Android prior to 2.3.6. A local attacker can trigger kernel memory corruption via the pvrsrvkm device by supplying crafted user data, enabling privilege escalation to root. Multiple connected sources (including Levitator exploit code,...

CVE-2011-4276

The CVE-2011-4276 issue affects Android 2.3 before 2.3.6, where the Bluetooth service (com/android/phone/BluetoothHeadsetService.java) allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer. Root cause is a flaw in the Bluetooth service handling AT phon...

CVE-2014-7954

The CVE-2014-7954 entry concerns Android 4.4.4 where the MTP path traversal vulnerability lies in MtpServer.cpp (doSendObjectInfo). The issue allows physically proximate attackers connected to the device to upload files outside the sdcard by crafting an MTP request with a .. in the name parameter...

CVE-2014-9784

CVE-2014-9784 affects Qualcomm components in Android on Nexus 5 and Nexus 7 (2013) devices. The issue arises from multiple buffer overflows in drivers/char/diag/diag_debugfs.c, enabling a local attacker with a crafted application to gain privileges. Root cause: buffer overflow in the diag_debugfs...

CVE-2014-9785

Affected software/hardware: Android on Nexus 7 (2013) with Qualcomm drivers, specifically drivers/misc/qseecom.c. Vulnerability details: The code path does not validate addresses before copying data, enabling a local attacker to gain privileges via a crafted application. Root cause is improper ad...

CVE-2014-9798

CVE-2014-9798 concerns the Qualcomm bootloader on Nexus 5 running Android before 2016-07-05. The flaw arises in platform/msm_shared/dev_tree.c where the bootloader does not validate the relationship between tag addresses and aboot addresses, enabling a crafted application to cause a denial-of-ser...

CVE-2014-9863

The CVE-2014-9863 issue is a local privilege escalation in Android due to an integer underflow in the Qualcomm diag driver used on Nexus 5 and Nexus 7 (2013). A crafted app could exploit this to gain privileges or access sensitive data. Affected software is Android on Nexus devices prior to the 2...

CVE-2014-9864

The CVE-2014-9864 entry concerns Android on Nexus devices (Nexus 5/7 2013) where drivers/misc/qseecom.c in Qualcomm components does not validate ioctl calls, enabling privilege escalation via a crafted app. Connected docs are not provided here, but the description states the flaw allows local pri...

CVE-2014-9865

CVE-2014-9865 affects Android on Nexus 5 and Nexus 7 (2013) due to improper input restriction in drivers/misc/qseecom.c within Qualcomm components, enabling privilege escalation via a crafted application. Affected description notes elevation of privilege through user-space input, linked to Androi...

CVE-2014-9868

CVE-2014-9868 affects Qualcomm MSM camera_v2 sensor code (msm_csiphy.c) in Android prior to 2016-08-05 on Nexus 5 and Nexus 7 (2013). A crafted mask value provided by an application can lead to privilege escalation. The vulnerability is documented in the Android/Qualcomm context and is addressed ...

CVE-2014-9877

Technical details about CVE-2014-9877 are not publicly provided in the supplied documents. The Nexus/Qualcomm vulnerability description is present, but precise affected products, versions, root cause, or fixes are not detailed here. Monitor for updates.

CVE-2014-9890

CVE-2014-9890 describes an off-by-one error in the MSM camera_v2 CCI driver (Qualcomm components) used on Nexus 5 and Nexus 7 (2013). The vulnerability allows a local attacker to gain privileges by sending a crafted I2C command, due to a boundary handling flaw in msm_cci.c. Affected firmware is A...

CVE-2014-9909

The CVE-2014-9909 entry describes an elevation of privilege vulnerability in the Broadcom Wi‑Fi driver for Android, where a local malicious application could execute arbitrary code in the kernel context. The issue is considered High impact because it requires compromising a privileged process fir...

CVE-2014-9923

CVE-2014-9923 is described in the provided records as a buffer copy without checking the input size, located in NAS for CAF Android releases using the Linux kernel. The vulnerability path is not fully detailed beyond this memory-unsafe copy, and exploitation details are not provided in the suppli...

CVE-2014-9933

Technical details about CVE-2014-9933 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2014-9937

CVE-2014-9937: Concrete detail from connected sources shows a buffer overflow in TrustZone’s DRM routine in Android, applicable across CAF Linux kernel builds. The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service within TrustZone DRM, via a vulnerabilit...

CVE-2014-9941

Technical details for CVE-2014-9941 are not publicly provided in the supplied documents. No specific affected products, root cause, or fixes are present here; monitor for updates from official sources.

CVE-2014-9950

Technical details for CVE-2014-9950 are not publicly available in the provided documents; monitor for updates.

CVE-2014-9969

CVE-2014-9969 concerns Qualcomm GPS client cryptography on Android CAF builds using the Linux kernel, where the GPS client may use an insecure cryptographic algorithm. Connected documents corroborate this description (Android/Qualcomm stack). The provided sources do not include concrete patch ver...

CVE-2015-6606

CVE-2015-6606 affects the Secure Element Evaluation Kit (SEEK/SmartCard API) plugin in Android up to 5.1.1 LMY48T. The flaw allows a crafted application to gain elevated privileges (Signature or SignatureOrSystem) due to a code-injection flaw in SEEK, enabling privilege escalation. Affected: SEEK...

CVE-2015-8596

CVE-2015-8596 concerns a buffer length validation flaw in Qualcomm closed‑source malware protection components used in Android CAF builds running the Linux kernel. The root cause is missing validation of buffer lengths, described across multiple sources as a buffer overflow/length-check omission....

CVE-2015-8893

CVE-2015-8893 concerns the Qualcomm bootloader (aboot.c) in Android on Nexus 5 and Nexus 7 (2013) devices. A crafted application can cause a denial of service (OS outage or buffer over-read). The issue affects Android platforms pre-dating the 2016-07-05 patch level; the available connected docume...