CVE-2022-26454

CVE-2022-26454 affects the teei component where a memory corruption caused by an integer overflow could enable local privilege escalation to System level without user interaction. Public documents consistently describe the issue as a local escalation vulnerability in teei, with the attack surface...

CVE-2022-36843

CVE-2022-36843 describes a heap-based overflow in the MHW_RECOG_LIB_INFO function of libSDKRecognitionText.spensdk.samsung.so on Samsung devices. The vulnerability stems from a memory handling issue in the recognition library, potentially leading to memory access faults. Public references point t...

CVE-2022-38675

CVE-2022-38675 concerns a defect in the GPU driver where a missing bounds check enables a local out-of-bounds write, potentially causing a local denial of service in the kernel. The description across multiple sources agrees on the kernel impact and local attack vector, with CVSS v3.1 metrics ind...

CVE-2022-39109

Technical details about CVE-2022-39109 are not publicly provided in the connected documents. Monitor for updates from vendors and advisories to obtain affected products, versions, and fixes.

CVE-2022-42760

The records collectively describe CVE-2022-42760 as a vulnerability in the WLAN driver (notably for UNISOC chipset implementations) where a missing bounds check could allow local denial of service in WLAN services. Affected component: WLAN driver; root cause: out-of-bounds-like condition due to i...

CVE-2022-42761

CVE-2022-42761 concerns the WLAN driver in UNISOC chipsets, where a missing bounds check can enable local denial of service in WLAN services. The NVD/Red Hat/UNISOC‑linked entries describe the issue and assign CVSS v3.1 base score 5.5 (Medium) with LOCAL attack vector, LOW complexity and privileg...

CVE-2022-44419

CVE-2022-44419 affects the modem’s NAS security mode handling, where missing verification of NAS Security Mode Command Replay Attacks in LTE allows a local attacker to cause denial of service without extra privileges. The issue is described across multiple sources as a local impact with a high av...

CVE-2022-44440

CVE-2022-44440 involves a missing bounds check in the WLAN driver, causing a local denial of service. The provided documents confirm the issue and impact but do not supply affected products/versions or a remediation/fix. No exploitation details are included in the sources.

CVE-2022-47472

The CVE-2022-47472 issue affects the telephony service (notably in UNISOC chipsets) due to a missing permission check, enabling local information disclosure without extra execution privileges. The NVD/CVEs list a CVSS v3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW privileges requir...

CVE-2022-47484

CVE-2022-47484 concerns a missing permission check in the telephony service, enabling local denial of service without additional execution privileges. Connected sources consistently reference the telephony module and privilege check omission as the root cause, but do not provide concrete details ...

CVE-2022-48374

CVE-2022-48374 affects the UNISOC tee service. The root cause is a missing bounds check that enables an out-of-bounds write, resulting in local denial of service with System execution privileges required. Affected component is the tee service in UNISOC chipsets; specific vulnerable versions are n...

CVE-2022-48443

CVE-2022-48443 refers to a missing permission check in the telephony service, enabling local denial of service with no additional privileges. The available connected sources consistently describe the issue at the telephony service layer; some entries mention Unisoc chipsets as related affected pl...

CVE-2023-20637

CVE-2023-20637 affects the ril component in MediaTek chips, with an out-of-bounds write caused by a missing bounds check. The issue could enable local escalation of privilege with System execution privileges required and no user interaction needed. Patch ALPS07628588/ALPS07628588 is referenced; n...

CVE-2023-20693

Summary (CVE-2023-20693) In MediaTek wlan firmware, an uncaught exception can cause a system crash, leading to a remote denial of service without user interaction. The NVD entry lists a network exploit vector with no privileges required and no user interaction, and a high impact to availability. ...

CVE-2023-20708

CVE-2023-20708 involves a possible out-of-bounds read in the MediaTek keyinstall component. The underlying issue is a missing bounds check, enabling local privilege escalation with System execution privileges needed. Exploitation status is not documented in the provided sources. The vulnerability...

CVE-2023-20722

CVE-2023-20722 affects the m4u component with an out-of-bounds write caused by improper input validation. This can lead to local privilege escalation requiring System execution privileges, with no user interaction needed. A patch is available (Patch ID: ALPS07771518; Issue ID: ALPS07680084). Conn...

CVE-2023-20815

The CVE-2023-20815 issue affects MediaTek WLAN software. Affected component: WLAN service; root cause: out-of-bounds write due to improper input validation. Impact: local escalation of privilege with System execution privileges required; no user interaction needed. Remediation: patch ALPS07453587...

CVE-2023-21234

CVE-2023-21234 is a Wear OS/Android System vulnerability involving a missing permission check in the launchConfirmationActivity of ChooseLockSettingsHelper.java that could allow enabling developer options without entering the lockscreen PIN. This enables a local escalation of privilege with no ex...

CVE-2023-21296

CVE-2023-21296 corresponds to an information-disclosure flaw in Android’s permission side-channel that can reveal whether an app is installed, enabling local escalation of privilege with no extra execution privileges required. Exploitation requires user interaction. Android 14 patch release notes...

CVE-2023-21298

CVE-2023-21298 is a disclosed vulnerability affecting Slice, described as a side-channel information disclosure that can lead to local privilege escalation without extra execution privileges or user interaction. Connected sources corroborate an installed-apps disclosure with local elevation of pr...

CVE-2023-21305

Technical details for CVE-2023-21305 are not publicly provided in the supplied documents. No specifics on affected products, versions, or fixes are present. Please monitor for updates.

CVE-2023-21310

CVE-2023-21310 affects Android Bluetooth, described as an out-of-bounds write caused by a heap buffer overflow in the Bluetooth component. The vulnerability allows local elevation of privilege with System execution privileges and does not require user interaction. The provided documents confirm t...

CVE-2023-21350

CVE-2023-21350 affects Android's Media Projection component. An attacker can infer whether a target app is installed via a side-channel disclosure, without query permissions, enabling local information leakage with no user interaction. Impact is limited to confidentiality (high) per sources; atta...

CVE-2023-21378

CVE-2023-21378 : In Telecomm, a missing permission check enables silencing the ring for calls of secondary users, causing a local elevation of privilege with no additional execution privileges needed. Exploitation does not require user interaction. CVSSv3.1 base score is 7.8 (High), with local at...

CVE-2023-21388

CVE-2023-21388 affects Google Android, specifically the Settings component, where a missing permission check can enable a local escalation of privilege without extra execution privileges or user interaction. The vulnerability is categorized as EoP with a high impact on confidentiality, integrity,...

CVE-2023-30921

CVE-2023-30921 affects UNISOC chipsets (SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T618/T612/T616/T770/T820/S8000). Root cause: missing permission check in the messaging service, enabling local information disclosure with no additional execution privileges. Impact per sources: local confidential...

CVE-2023-30938

CVE-2023-30938 involves a missing privilege check in the telephony service that can lead to local information disclosure without extra execution privileges. Connected sources describe affected UNISOC chipsets (e.g., SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T618, T612, T616, T820, S8000)...

CVE-2023-33881

Summary: CVE-2023-33881 describes a missing permission check in the telephony service that can cause local information disclosure without extra privileges. The issue is documented across multiple sources (NVD/Red Hat/CVE listing) with the same core impact: local information leakage, low attack co...

CVE-2023-33884

CVE-2023-33884 reflects a vulnerability in the telephony service where a missing privilege check enables local information disclosure without extra execution privileges. The issue affects UNISOC chipsets (examples include SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T618/T616/T770/T820/S8000 and r...

CVE-2023-33885

The CVE-2023-33885 entry describes a vulnerability in the telephony service where a missing permission check could allow local information disclosure without requiring additional execution privileges. The NVD entry assigns a 5.5 CVSS v3.1 score (LOCAL, LOW attack complexity, HIGH confidentiality ...

CVE-2023-42650

CVE-2023-42650 concerns UNISOC chipsets’ engineermode. The vulnerability is due to a missing permission check in engineermode, which could allow local information disclosure without requiring additional execution privileges. The NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL att...

CVE-2023-42653

CVE-2023-42653 affects the faceid service in UNISOC chipsets. The root cause is a missing bounds check that enables an out-of-bounds write, potentially causing a local denial of service with no additional execution privileges. According to the provided documents, the issue is a local impact (AV:L...

CVE-2023-42750

CVE-2023-42750 affects the gnss service in UNISOC chipsets, caused by a missing bounds check that enables a local out-of-bounds write. This can lead to local denial of service and requires System execution privileges. Available connected sources corroborate the same root cause and impact across m...

CVE-2023-52351

The CVE-2023-52351 issue affects the ril service in UNISOC chipsets, caused by a missing bounds check that enables an out-of-bounds write. This could lead to local denial of service with System execution privileges required. Affected component: ril service (UNISOC). Impact is described as local D...

CVE-2024-20088

CVE-2024-20088 affects MediaTek keyinstall: an out-of-bounds read due to a missing bounds check, enabling local information disclosure with system privileges. Public exploitation details are not provided in the available documents. The vulnerability is associated with patch ID ALPS08932099 and Is...

CVE-2024-20139

CVE-2024-20139 affects MediaTek Bluetooth firmware (ALPS09001270) due to improper handling of exceptional conditions, causing local denial of service without user interaction. Root cause appears to be a firmware assertion under exceptional handling, with exploitation described as requiring adjace...

CVE-2024-39440

CVE-2024-39440 affects the DRM service and is caused by a null pointer dereference that can crash the system, leading to local denial of service with SYSTEM privileges required. Public references consistently describe the issue as a local DoS in DRM service components; no exploitation details are...

CVE-2026-0100

CVE-2026-0100 : The description across NVD, OSV, and vuln enrichment indicates a vulnerability in the Load path of LoadedArsc.cpp causing an out-of-bounds write via a heap buffer overflow. This can enable local privilege escalation with no extra execution privileges required; exploitation is poss...

CVE-2026-28580

Technical details about CVE-2026-28580 (affected products, vulnerable components, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates in the connected feeds (NVD, EUVD, OSV) for confirmation and patches.

CVE-2011-1352

The CVE-2011-1352 issue affects the PowerVR SGX driver used in Android prior to 2.3.6. A local attacker can trigger kernel memory corruption via the pvrsrvkm device by supplying crafted user data, enabling privilege escalation to root. Multiple connected sources (including Levitator exploit code,...

CVE-2011-4276

The CVE-2011-4276 issue affects Android 2.3 before 2.3.6, where the Bluetooth service (com/android/phone/BluetoothHeadsetService.java) allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer. Root cause is a flaw in the Bluetooth service handling AT phon...

CVE-2014-4959

Technical details about CVE-2014-4959 are not publicly provided in the included documents; no affected products, root cause, impact, or remediation are specified. Monitor for updates.

CVE-2014-9785

Affected software/hardware: Android on Nexus 7 (2013) with Qualcomm drivers, specifically drivers/misc/qseecom.c. Vulnerability details: The code path does not validate addresses before copying data, enabling a local attacker to gain privileges via a crafted application. Root cause is improper ad...

CVE-2014-9798

CVE-2014-9798 concerns the Qualcomm bootloader on Nexus 5 running Android before 2016-07-05. The flaw arises in platform/msm_shared/dev_tree.c where the bootloader does not validate the relationship between tag addresses and aboot addresses, enabling a crafted application to cause a denial-of-ser...

CVE-2014-9890

CVE-2014-9890 describes an off-by-one error in the MSM camera_v2 CCI driver (Qualcomm components) used on Nexus 5 and Nexus 7 (2013). The vulnerability allows a local attacker to gain privileges by sending a crafted I2C command, due to a boundary handling flaw in msm_cci.c. Affected firmware is A...

CVE-2014-9894

CVE-2014-9894 affects drivers/misc/qseecom.c in the Qualcomm component used in Android on Nexus 7 (2013) devices. The root cause is that certain name strings may not end with a null terminator ('\0'), enabling a crafted application to obtain sensitive information. The vulnerability is described f...

CVE-2014-9935

CVE-2014-9935 describes an integer overflow in TrustZone that could lead to a buffer overflow in a DRM routine across CAF Android releases using the Linux kernel. The root cause is an overflow in TrustZone handling within DRM code, enabling potential memory corruption in affected devices. Public ...

CVE-2014-9950

Technical details for CVE-2014-9950 are not publicly available in the provided documents; monitor for updates.

CVE-2014-9969

CVE-2014-9969 concerns Qualcomm GPS client cryptography on Android CAF builds using the Linux kernel, where the GPS client may use an insecure cryptographic algorithm. Connected documents corroborate this description (Android/Qualcomm stack). The provided sources do not include concrete patch ver...

CVE-2015-1474

CVE-2015-1474 affects Android up to version 5.0, specifically the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp. The vulnerability arises from multiple integer overflows that can be triggered by inputs with a large number of file descriptors or large in...