CVE-2022-48243

CVE-2022-48243 concerns the UNISOC audio service, where a missing permission check in the audio service could enable local escalation of privilege with no additional execution privileges. The CVE is consistently described across sources as a local-privilege-escalation issue without public details...

CVE-2022-48374

CVE-2022-48374 affects the UNISOC tee service. The root cause is a missing bounds check that enables an out-of-bounds write, resulting in local denial of service with System execution privileges required. Affected component is the tee service in UNISOC chipsets; specific vulnerable versions are n...

CVE-2022-48443

CVE-2022-48443 refers to a missing permission check in the telephony service, enabling local denial of service with no additional privileges. The available connected sources consistently describe the issue at the telephony service layer; some entries mention Unisoc chipsets as related affected pl...

CVE-2023-20636

CVE-2023-20636 affects the MediaTek display drm module. The root cause is a missing bounds check that can cause an out-of-bounds write, enabling local privilege escalation with SYSTEM execution privileges required; no user interaction is needed. A patch is identified as ALPS07292593/ALPS07292593....

CVE-2023-20645

CVE-2023-20645 affects the ril component in MediaTek-based devices. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially enabling local information disclosure with system execution privileges. Exploitation does not require user interaction. A patch is identifie...

CVE-2023-20693

Summary (CVE-2023-20693) In MediaTek wlan firmware, an uncaught exception can cause a system crash, leading to a remote denial of service without user interaction. The NVD entry lists a network exploit vector with no privileges required and no user interaction, and a high impact to availability. ...

CVE-2023-20707

CVE-2023-20707 affects the ril component in MediaTek chips, caused by a missing bounds check that enables an out-of-bounds write. This could allow local escalation of privilege with System execution privileges required, and no user interaction is needed. The available fix/patch is ALPS07628556 (I...

CVE-2023-21329

CVE-2023-21329 describes an information disclosure in Android's Activity Manager caused by a missing permission check, enabling local access to whether an app is installed without user interaction. The Android 14 security release notes list this CVE under Framework with a Moderate severity and in...

CVE-2023-21352

CVE-2023-21352 affects NFA and is caused by a missing bounds check leading to an out-of-bounds read. This can result in local information disclosure without additional execution privileges, and exploitation does not require user interaction, per the provided description. Connected sources corrobo...

CVE-2023-21378

CVE-2023-21378 : In Telecomm, a missing permission check enables silencing the ring for calls of secondary users, causing a local elevation of privilege with no additional execution privileges needed. Exploitation does not require user interaction. CVSSv3.1 base score is 7.8 (High), with local at...

CVE-2023-21380

CVE-2023-21380 is a Bluetooth heap buffer overflow in Android that can enable local elevation of privilege with SYSTEM execution when exploited without user interaction. The vulnerability is listed in Android 14 security release notes and associated with an out-of-bounds write in Bluetooth. Affec...

CVE-2023-30913

CVE-2023-30913 describes a vulnerability in the telephony service caused by a missing permission check, enabling potential local information disclosure without extra execution privileges. Multiple sources confirm the issue across databases (NVD, Red Hat, CVE, CVE enrichment feeds) and tie it to t...

CVE-2023-30914

Technical details about CVE-2023-30914 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2023-40101

CVE-2023-40101 describes an out-of-bounds read in the collapse path of canonicalize_md.c that can disclose local information without extra privileges or user interaction. Public records in multiple sources (NVD, Red Hat, CNVD, etc.) confirm the same description. The Android 14 release notes list ...

CVE-2023-40642

CVE-2023-40642 concerns a missing permission check in Messaging that could allow local information disclosure without requiring additional execution privileges. The available sources consistently describe the issue as a permissions check gap in Messaging, enabling access to sensitive information ...

CVE-2023-40650

CVE-2023-40650 affects the Telecom service and is caused by a missing permission check that can allow local information disclosure without requiring additional execution privileges. Public information in connected sources confirms the issue and its impact, but does not provide product/version spe...

CVE-2023-42634

CVE-2023-42634 concerns a vulnerability in the validationtools component. The issue is a missing permission check that can allow local information disclosure without requiring additional execution privileges. Documents consistently describe it as a local information disclosure risk without specif...

CVE-2023-42650

CVE-2023-42650 concerns UNISOC chipsets’ engineermode. The vulnerability is due to a missing permission check in engineermode, which could allow local information disclosure without requiring additional execution privileges. The NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL att...

CVE-2024-20095

Summary: CVE-2024-20095 affects the MediaTek m4u component, with a likely out-of-bounds read caused by a missing bounds check, leading to local information disclosure. The impact is described as requiring system-level privileges, with no user interaction needed. The vulnerability is associated wi...

CVE-2024-20108

CVE-2024-20108 affects the atci component (MediaTek chipsets). The vulnerability is an out-of-bounds write caused by a missing bounds check, enabling a local escalation of privilege with System execution privileges required. No user interaction is needed. A patch is referenced (Patch ID: ALPS0908...

CVE-2024-20139

CVE-2024-20139 affects MediaTek Bluetooth firmware (ALPS09001270) due to improper handling of exceptional conditions, causing local denial of service without user interaction. Root cause appears to be a firmware assertion under exceptional handling, with exploitation described as requiring adjace...

CVE-2024-39437

CVE-2024-39437 concerns the UNISOC/linkturbonative service, where improper input validation enables a possible command injection. The underlying effect is local privilege escalation to SYSTEM level. Documented impact: local execution with high privileges; attacked component/process is the linktur...

CVE-2025-48574

CVE-2025-48574 affects Android’s UI component: DisplayPolicy.java (validateAddingWindowLw). The issue arises from a missing permission check, allowing an app to intercept drag-and-drop events and perform local elevation of privilege without extra execution privileges or user interaction. Public d...

CVE-2025-48644

CVE-2025-48644 is described across multiple sources as a DoS issue caused by improper input validation in various locations, enabling a local denial-of-service with no user interaction or additional privileges required. The linked documents consistently frame the impact as a persistent DoS affect...

CVE-2026-0070

CVE-2026-0070 affects Android’s DevicePolicyManagerService.java, where improper input validation can enable hiding a system critical package, causing a local denial of service without extra privileges. The available documents consistently describe the issue as a local DoS through the described co...

CVE-2026-28580

Technical details about CVE-2026-28580 (affected products, vulnerable components, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates in the connected feeds (NVD, EUVD, OSV) for confirmation and patches.

CVE-2011-1352

The CVE-2011-1352 issue affects the PowerVR SGX driver used in Android prior to 2.3.6. A local attacker can trigger kernel memory corruption via the pvrsrvkm device by supplying crafted user data, enabling privilege escalation to root. Multiple connected sources (including Levitator exploit code,...

CVE-2011-4276

The CVE-2011-4276 issue affects Android 2.3 before 2.3.6, where the Bluetooth service (com/android/phone/BluetoothHeadsetService.java) allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer. Root cause is a flaw in the Bluetooth service handling AT phon...

CVE-2014-0900

CVE-2014-0900 affects the Android Device Administrator code prior to 4.4.1_r1. The root cause is the failure to update the mAdminMap data structure, which may allow an attacker to spoof device administrators and thereby bypass Mobile Device Management (MDM) restrictions. Documents indicate the im...

CVE-2014-3164

CVE-2014-3164 affects Android code in cmds/servicemanager/service_manager.c prior to commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5. The vulnerability allows a denial of service via a NULL pointer dereference or an out-of-bounds write, related to binder passed lengths. Connected documents (NVD e...

CVE-2014-9787

CVE-2014-9787 describes an integer overflow in drivers/misc/qseecom.c of the Qualcomm component used in Android on Nexus 7 (2013) devices. The vulnerability could allow a local attacker to gain privileges via a crafted application, due to the overflow in the Qualcomm qseecom driver. Public detail...

CVE-2014-9788

Converged detail from CNVD-2016-04814 confirms CVE-2014-9788 is a buffer overflow in the Qualcomm sound driver in Android on Nexus 5 prior to 2016-07-05, exploitable by a crafted app to gain privileges. Root cause: overflow in the Qualcomm sound driver; Impact: local privilege escalation. A patch...

CVE-2014-9802

CVE-2014-9802: Concrete details found in CNVD-2016-04811 and related records show an integer overflow in lib/libfdt/fdt.c within the Qualcomm component on Android, affecting Nexus 5 and Nexus 7 (2013) devices. Root cause: integer overflow in the FDT parser leads to privilege escalation when proce...

CVE-2014-9868

CVE-2014-9868 affects Qualcomm MSM camera_v2 sensor code (msm_csiphy.c) in Android prior to 2016-08-05 on Nexus 5 and Nexus 7 (2013). A crafted mask value provided by an application can lead to privilege escalation. The vulnerability is documented in the Android/Qualcomm context and is addressed ...

CVE-2014-9894

CVE-2014-9894 affects drivers/misc/qseecom.c in the Qualcomm component used in Android on Nexus 7 (2013) devices. The root cause is that certain name strings may not end with a null terminator ('\0'), enabling a crafted application to obtain sensitive information. The vulnerability is described f...

CVE-2014-9937

CVE-2014-9937: Concrete detail from connected sources shows a buffer overflow in TrustZone’s DRM routine in Android, applicable across CAF Linux kernel builds. The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service within TrustZone DRM, via a vulnerabilit...

CVE-2014-9943

CVE-2014-9943: In Core Kernel in CAF Android builds using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist. The available connected documents describe this as a Core Kernel issue with a Null Pointer Dereference, affecting Android CAF/Linux kernel code paths, and ...

CVE-2014-9950

Technical details for CVE-2014-9950 are not publicly available in the provided documents; monitor for updates.

CVE-2014-9960

CVE-2014-9960 is a documented buffer‑overflow vulnerability in the PlayReady API present in Android releases from CAF using the Linux kernel. The issue affects the PlayReady API component (buffer overflow in PlayReady) and is supported by multiple entries (NVD, CNVD, CVELIST, PRION, etc.). The CV...

CVE-2015-1526

CVE-2015-1526 affects Android, specifically its media_server component. The vulnerability allows remote attackers to cause a denial of service through a crafted application. The provided documents identify the affected area as the media_server and confirm DoS as the impact, but do not disclose th...

CVE-2015-6610

CVE-2015-6610 is a libstagefright elevation-of-privilege in Android (Stagefright) that can let a local malicious app cause memory corruption and potentially execute code inside the mediaserver service. Affected are Android versions prior to 5.1.1 LMY48X and 6.0 before 2015-11-01; exploitation is ...

CVE-2015-6630

CVE-2015-6630 affects Android SystemUI. The issue allows a crafted application to read screenshots and elevate privileges in affected devices. Affected software: SystemUI on Android 5.x before 5.1.1 LMY48Z and Android 6.0 before 2015-12-01. Root cause: information disclosure enabling privilege es...

CVE-2015-8595

Connected sources tie CVE-2015-8595 to a Qualcomm closed‑source DRM issue in Android CAF using the Linux kernel. CNVD-2017-26645 describes a buffer overflow in the digital television/digital radio DRM of the Qualcomm component, capable of enabling arbitrary code execution or DoS. The available do...

CVE-2015-9028

CVE-2015-9028 describes a buffer overflow in a cryptographic routine used by CAF Android builds that use the Linux kernel. The vulnerability is limited to Android CAF releases and is exploitable locally with user interaction required; the CVSS vectors indicate a HIGH impact on confidentiality, in...

CVE-2016-0836

CVE-2016-0836 is a stack-based buffer overflow in mediaserver's decoder/impeg2d_vld.c used by Android 6.x. The vulnerability allows remote attackers to trigger memory corruption and potentially execute code or cause a denial of service via a crafted media file. Affected component is mediaserver i...

CVE-2016-0849

CVE-2016-0849 describes an Elevation of Privilege in Android’s Recovery Procedure due to multiple integer overflows in minzip/SysUtil.c. A local attacker could exploit a crafted application to gain Signature or SignatureOrSystem privileges. Affected versions: Android 5.0.x prior to 5.0.2, 5.1.x p...

CVE-2016-10238

CVE-2016-10238 concerns the QSEE component in CAF Android builds. The issue stems from a page-alignment problem that could potentially bypass the Linux kernel access control. The vulnerability is described as a local issue within QSEE across Android releases from CAF, with the impact explicitly s...

CVE-2016-10338

Technical details about CVE-2016-10338 are not publicly provided in the connected documents. The available descriptions simply note an RPMB processing issue in CAF Android kernels. Monitor for updates; no specifics on impact, affected versions, or fixes are provided.

CVE-2016-10386

CVE-2016-10386 describes an array index out of bounds vulnerability in LPP within Qualcomm CAF Android/Linux kernel components. Public docs confirm the issue affects Qualcomm-labeled CAF Linux kernel code and characterize it as an out-of-bounds condition in LPP, with high-severity impact (per CVS...

CVE-2016-11027

CVE-2016-11027 affects Samsung mobile devices running M(6.0) software. In the Shade Locked state, a physically proximate attacker can read notifications on the lock screen. The entry provides the Samsung ID SVE-2016-7132 but does not specify exploit details, affected models, versions beyond Andro...