Lucene search
+L
GoogleAndroid

8251 matches found

CVE
CVE
added 2020/12/15 4:06 p.m.61 views

CVE-2020-27051

CVE-2020-27051 is an out-of-bounds write caused by an integer overflow in NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc. Affects Android 11; the privilege impact is local with partial confidentiality/integrity/availability, and exploitation requires user interaction. CVSSv3.1 base score 7.8 (HIGH...

7.8CVSS8.2AI score0.00423EPSS
Save
CVE
CVE
added 2020/12/15 4:07 p.m.61 views

CVE-2020-27055

The CVE-2020-27055 vulnerability affects Android 11, specifically in WifiConfigController.java and WifiConfigController2.java. The issue arises from improper input validation in isSubmittable and showWarningMessagesIfAppropriate, leading to an insecure WiFi configuration and potential remote info...

7.5CVSS7.4AI score0.00615EPSS
Save
CVE
CVE
added 2020/12/18 8:45 a.m.61 views

CVE-2020-35549

Technical details about CVE-2020-35549 are not publicly available in the provided connected documents. Monitor for updates.

5.5CVSS5.6AI score0.00145EPSS
Save
CVE
CVE
added 2021/02/02 11:01 p.m.61 views

CVE-2021-0355

CVE-2021-0355 affects Android 11 in the kisd component. The issue is an out-of-bounds write caused by an integer overflow, enabling local escalation of privilege with SYSTEM execution privileges required. Exploitation does not require user interaction. The vulnerability is documented across multi...

6.7CVSS6.7AI score0.00151EPSS
Save
CVE
CVE
added 2021/03/10 4:11 p.m.61 views

CVE-2021-0386

CVE-2021-0386 affects Android 11 in the UsbConfirmActivity onCreate, enabling a tapjacking vector due to an insecure default value. The vulnerability could allow local escalation of privilege with user interaction required for exploitation (ATT&CK: Local, UI: Required). The issue is documented ac...

7.8CVSS7.6AI score0.00347EPSS
Save
CVE
CVE
added 2021/03/10 4:12 p.m.61 views

CVE-2021-0388

CVE-2021-0388 affects Android 11 and is tied to the ImsPhoneCallTracker.java onReceive path, where a misappropriation of data usage can occur due to an incorrect broadcast handler. This can enable local escalation of privilege by attributing video‑call data to the wrong app, without requiring any...

7.8CVSS7.7AI score0.00114EPSS
Save
CVE
CVE
added 2021/03/10 4:15 p.m.61 views

CVE-2021-0457

CVE-2021-0457 targets the FingerTipS touch screen driver in the Android kernel and describes an out-of-bounds write caused by a heap buffer overflow, enabling local privilege escalation to SYSTEM with no user interaction required. Public sources (NVD entry, ZDI advisory) corroborate a heap-based ...

6.7CVSS6.8AI score0.00217EPSS
Save
CVE
CVE
added 2021/03/10 4:18 p.m.61 views

CVE-2021-0463

CVE-2021-0463 concerns Google Android’s kernel component where in convertToHidl (convert.cpp) an out-of-bounds read can occur due to uninitialized data from ReturnFrameworkMessage. This issue may disclose local information without extra execution privileges and requires user interaction to exploi...

5.5CVSS5.1AI score0.00136EPSS
Save
CVE
CVE
added 2021/06/11 4:42 p.m.61 views

CVE-2021-0489

CVE-2021-0489: In Android’s memory management driver, a missing bounds check enables an out-of-bounds write. This could allow local escalation of privilege without user interaction. Affected products/versions are tied to Android SoCs; the vulnerability is listed in the Android May 2021 security b...

7.8CVSS7.7AI score0.00131EPSS
Save
CVE
CVE
added 2021/06/11 4:42 p.m.61 views

CVE-2021-0491

CVE-2021-0491 affects Android devices via a vulnerability in the memory management driver, specifically in the MTK/Multi-SoC ecosystem referenced in the 2021 Android security landscape. The issue is a missing permission check in the memory management driver, enabling local elevation of privilege ...

7.8CVSS7.7AI score0.00121EPSS
Save
CVE
CVE
added 2021/06/21 4:01 p.m.61 views

CVE-2021-0532

CVE-2021-0532 affects the Android memory management driver and is caused by a race condition that can lead to memory corruption and local escalation of privilege with no additional privileges or user interaction required. The description is consistent across multiple sources (NVD, Red Hat, CVE li...

7CVSS7.1AI score0.00085EPSS
Save
CVE
CVE
added 2021/12/15 6:06 p.m.61 views

CVE-2021-1038

CVE-2021-1038 describes a DoS via a tapjacking/overlay vulnerability in UserDetailsActivity of AndroidManifest.xml, affecting Android 9–12. The root cause is an overlay/tapjacking issue that can cause local denial of service with no extra privileges; exploitation requires user interaction per CVS...

5.5CVSS5.3AI score0.00111EPSS
Save
CVE
CVE
added 2021/12/15 6:06 p.m.61 views

CVE-2021-1039

CVE-2021-1039 affects Android Platform apps: NotificationAccessActivity in AndroidManifest.xml can enable a local elevation of privilege via a tapjacking/overlay trick. Affected: Android 9–12. Root cause: overlay/tapjacking allows bypass of user interaction requirements to gain higher privileges ...

7.8CVSS7.6AI score0.00133EPSS
Save
CVE
CVE
added 2021/06/11 2:45 p.m.61 views

CVE-2021-25393

CVE-2021-25393 affects Samsung's SecSettings prior to SMR May-2021 Release 1. The issue is improper sanitization of an incoming intent that lets a local attacker gain permissions to access system UID data. Affected component is the Settings app on Samsung Android devices; root cause relates to in...

6.6CVSS6.7AI score0.00138EPSS
Save
CVE
CVE
added 2021/06/11 2:33 p.m.61 views

CVE-2021-25409

CVE-2021-25409 describes an improper access in the Notification setting prior to Samsung SMR June‑2021 Release 1, allowing physically proximate attackers to set arbitrary notifications by physically configuring the device. The NVD entry indicates a low overall impact (CVSS v2: AV:L/AC:L/Au:N/I:P/...

2.4CVSS4.2AI score0.00104EPSS
Save
CVE
CVE
added 2021/09/09 6:03 p.m.61 views

CVE-2021-25450

CVE-2021-25450 describes a path traversal vulnerability in FactoryAirCommnadManger present before Samsung SMR Sep-2021 Release 1. An attacker could write files as the system UID via a remote socket by exploiting the vulnerable path handling in the component, leading to potential unauthorized file...

6.5CVSS6.5AI score0.00165EPSS
Save
CVE
CVE
added 2021/09/09 6:03 p.m.61 views

CVE-2021-25451

CVE-2021-25451 affects Android’s NetworkPolicyManagerService where a PendingIntent hijack can lead to exposure of IMSI data. The vulnerability is local, requiring user interaction, with a low-moderate CVSS (3.3 on 3.1, base score 3.3; confidentiality impact: Low). Root cause stated: manipulation ...

4.3CVSS4.1AI score0.00229EPSS
Save
CVE
CVE
added 2021/10/06 5:10 p.m.61 views

CVE-2021-25488

The CVE-2021-25488 issue affects Samsung devices via the modem interface driver’s recv_data() function. The root cause is a missing boundary check in the buffer handling, before the SMR Oct-2021 Release 1 patch, which permits an out-of-bounds (OOB) read. The vulnerability is documented across mul...

5.5CVSS5.6AI score0.00108EPSS
Save
CVE
CVE
added 2021/12/08 2:19 p.m.61 views

CVE-2021-25511

The CVE-2021-25511 issue affects Samsung FilterProvider prior to SMR Dec-2021 Release 1 and is described as an improper validation/path traversal vulnerability that enables an attacker to write arbitrary files. Documents consistently tie this to a path traversal flaw and do not provide exploit co...

7.8CVSS7.5AI score0.00112EPSS
Save
CVE
CVE
added 2022/01/04 3:56 p.m.61 views

CVE-2022-20013

The CVE-2022-20013 entry concerns the vow driver with a race-condition that enables memory corruption and local escalation to System privileges. Affected component: vow driver (MediaTek context appears in related sources). Impact: local privilege escalation with high impact on confidentiality, in...

6.4CVSS6.7AI score0.00082EPSS
Save
CVE
CVE
added 2022/09/06 5:19 p.m.61 views

CVE-2022-26460

The CVE-2022-26460 issue affects the vow component (MediaTek vow) and arises from an incorrect bounds check that enables an out-of-bounds write. This could lead to local privilege escalation with system execution privileges required; no user interaction is needed for exploitation. The entry refer...

6.7CVSS6.7AI score0.00105EPSS
Save
CVE
CVE
added 2022/11/08 12:00 a.m.61 views

CVE-2022-32615

CVE-2022-32615 concerns an out‑of‑bounds write in the ccd component caused by uninitialized data, enabling local privilege escalation with system execution privileges required. No user interaction is needed. The vulnerability details are supported by multiple sources in the provided documents, wi...

6.7CVSS6.7AI score0.0014EPSS
Save
CVE
CVE
added 2023/01/03 12:00 a.m.61 views

CVE-2022-32650

In the CVE-2022-32650 entries, the vulnerability affects the MediaTek mtk-isp component, described as a use-after-free caused by a logic error. This leads to local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. Remediation is...

6.7CVSS6.7AI score0.00099EPSS
Save
CVE
CVE
added 2022/10/14 12:00 a.m.61 views

CVE-2022-39103

The CVE-2022-39103 entry concerns the Gallery service, where a missing permission check is the root cause. This vulnerability could permit local denial of service without requiring additional execution privileges. Publicly provided documents reiterate the issue but do not specify affected version...

5.5CVSS5.4AI score0.00121EPSS
Save
CVE
CVE
added 2022/10/14 12:00 a.m.61 views

CVE-2022-39109

Technical details about CVE-2022-39109 are not publicly provided in the connected documents. Monitor for updates from vendors and advisories to obtain affected products, versions, and fixes.

7.8CVSS7.6AI score0.00155EPSS
Save
CVE
CVE
added 2022/10/14 12:00 a.m.61 views

CVE-2022-39128

CVE-2022-39128 corresponds to a vulnerability in the sensor driver that can cause a local denial of service in the kernel due to an out-of-bounds write from a missing bounds check. The connected documents consistently describe: (1) the flaw as a bounds-check omission in the sensor driver, (2) imp...

5.5CVSS5.4AI score0.00121EPSS
Save
CVE
CVE
added 2022/12/06 12:00 a.m.61 views

CVE-2022-42758

In CVE-2022-42758, multiple sources confirm a vulnerability in the WLAN driver (specifically a missing bounds check in the WLAN driver) that can cause local denial of service in WLAN services. Affected component is the WLAN driver (Unisoc chipset context appears in related tooling); root cause is...

3.3CVSS4AI score0.00117EPSS
Save
CVE
CVE
added 2023/01/04 12:00 a.m.61 views

CVE-2022-44424

CVE-2022-44424: The issue is a missing permission check in the music service that can trigger a local denial-of-service in the contacts service without requiring additional privileges. The available sources do not provide concrete exploit details, affected product versions, or a documented fix. M...

5.5CVSS5.4AI score0.00083EPSS
Save
CVE
CVE
added 2023/05/09 1:20 a.m.61 views

CVE-2022-47493

The CVE-2022-47493 entry describes a missing permission check in the UNISOC Soter service, enabling local denial of service with no additional execution privileges. The issue is tied to the soter service component and is described as a local vulnerability with a high availability impact, but no e...

5.5CVSS5.4AI score0.00087EPSS
Save
CVE
CVE
added 2023/05/09 1:21 a.m.61 views

CVE-2022-48368

CVE-2022-48368 affects the UNISOC chipsets’ audio service, with the root cause described as a missing permission check in the audio service. This could allow a local attacker with low privileges and no user interaction to escalate to a high-privilege level, potentially compromising confidentialit...

7.8CVSS7.7AI score0.0009EPSS
Save
CVE
CVE
added 2023/06/06 5:13 a.m.61 views

CVE-2022-48440

CVE-2022-48440 affects the dialer service. The root cause cited across connected documents is a missing permission check, enabling local denial of service with no additional execution privileges. The exposure is local (AV:L, PR:L) with a high impact on availability, and no exploitation details or...

6.2CVSS5.4AI score0.00075EPSS
Save
CVE
CVE
added 2023/06/06 5:13 a.m.61 views

CVE-2022-48445

CVE-2022-48445 concerns a vulnerability in the telephony service where a missing permission check could allow a local denial of service without requiring additional privileges. This is described consistently across multiple sources (NVD, Red Hat, CVE lists) as a local issue with no exploitation d...

5.9CVSS5.4AI score0.00083EPSS
Save
CVE
CVE
added 2023/03/07 12:00 a.m.61 views

CVE-2023-20624

CVE-2023-20624 describes a potential out-of-bounds write in the vow module due to an incorrect bounds check, which could enable local escalation of privilege with System execution privileges needed. User interaction is not required for exploitation. The issue affects MediaTek vow-related componen...

6.7CVSS6.7AI score0.00095EPSS
Save
CVE
CVE
added 2023/03/07 12:00 a.m.61 views

CVE-2023-20627

CVE-2023-20627 affects pqframework. The root cause is a missing bounds check leading to an out-of-bounds write that could allow local escalation to system privileges with no user interaction required. Impact is high for confidentiality, integrity, and availability per the cited CVSS details, with...

6.7CVSS6.7AI score0.00095EPSS
Save
CVE
CVE
added 2023/03/07 12:00 a.m.61 views

CVE-2023-20634

The connected sources describe CVE-2023-20634 as an input-validation based out-of-bounds write in Widevine, affecting MediaTek Widevine components. The root cause is improper input validation leading to local privilege escalation with system execution privileges, exploitable without user interact...

6.7CVSS6.7AI score0.00114EPSS
Save
CVE
CVE
added 2023/03/07 12:00 a.m.61 views

CVE-2023-20644

CVE-2023-20644 affects the ril module of MediaTek-based devices, where a missing bounds check causes an out-of-bounds read. This can lead to local information disclosure with potential system-privilege execution, with no user interaction required. Exploitation details are not provided in the docu...

4.4CVSS4.2AI score0.00093EPSS
Save
CVE
CVE
added 2023/03/07 12:00 a.m.61 views

CVE-2023-20648

CVE-2023-20648 affects the ril module in MediaTek chips. Root cause: missing bounds check causing an out-of-bounds read. Impact: local information disclosure with system execution privileges required; exploitation requires no user interaction. Patch ID: ALPS07628612. Multiple connected sources (N...

4.4CVSS4.2AI score0.00093EPSS
Save
CVE
CVE
added 2023/03/07 12:00 a.m.61 views

CVE-2023-20651

CVE-2023-20651 concerns the MediaTek apu component, where a missing bounds check enables an out-of-bounds read. This could lead to local information disclosure with System execution privileges needed; no user interaction is required. Public details consistently identify the vulnerability in apu a...

4.4CVSS4.2AI score0.00093EPSS
Save
CVE
CVE
added 2023/04/06 12:00 a.m.61 views

CVE-2023-20687

CVE-2023-20687 describes a race-condition that can cause a double free in the display DRM component, enabling local escalation of privileges to SYSTEM level without user interaction. The vulnerability is associated with a patch ID ALPS07570772 (Issue ID ALPS07570772). Exploitation status is not p...

6.4CVSS6.5AI score0.00068EPSS
Save
CVE
CVE
added 2023/05/15 12:00 a.m.61 views

CVE-2023-20700

CVE-2023-20700 affects Widevine in MediaTek chips. The vulnerability is described as an out-of-bounds write caused by a logic error, enabling local escalation of privilege with System execution privileges required; user interaction is not needed. Patch ID ALPS07643304 (Issue ALPS07643304) is refe...

6.7CVSS6.7AI score0.00097EPSS
Save
CVE
CVE
added 2023/08/07 3:21 a.m.61 views

CVE-2023-20785

Summary: CVE-2023-20785 describes a potential out-of-bounds write in the audio component due to a missing bounds check, enabling local escalation of privilege to system execution level. The vulnerability is described with no user interaction required. Affected component: Audio subsystem (MediaTek...

6.4CVSS6.6AI score0.00069EPSS
Save
CVE
CVE
added 2023/08/07 3:21 a.m.61 views

CVE-2023-20786

The CVE-2023-20786 entry concerns the MediaTek GPS component. A missing bounds check enables an out-of-bounds write, leading to local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. A patch entry is noted as ALPS07767811 (Issue AL...

6.7CVSS6.7AI score0.00095EPSS
Save
CVE
CVE
added 2023/08/07 3:21 a.m.61 views

CVE-2023-20803

Summary: CVE-2023-20803 affects the imgsys component of MediaTek microprogram software, where memory corruption can occur due to improper input validation. This leads to local privilege escalation with system execution privileges required and user interaction needed for exploitation. Technical de...

6.7CVSS6.8AI score0.00094EPSS
Save
CVE
CVE
added 2023/08/07 3:22 a.m.61 views

CVE-2023-20815

The CVE-2023-20815 issue affects MediaTek WLAN software. Affected component: WLAN service; root cause: out-of-bounds write due to improper input validation. Impact: local escalation of privilege with System execution privileges required; no user interaction needed. Remediation: patch ALPS07453587...

6.7CVSS6.7AI score0.00095EPSS
Save
CVE
CVE
added 2023/10/30 4:56 p.m.61 views

CVE-2023-21297

CVE-2023-21297 affects SEPolicy in Android, enabling a permissions bypass to access the factory MAC address. This can cause local information disclosure with System execution privileges required and does not require user interaction. The connected Red Hat, CNVD, and other sources reiterate the sa...

4.4CVSS5AI score0.00086EPSS
Save
CVE
CVE
added 2023/10/30 4:56 p.m.61 views

CVE-2023-21346

CVE-2023-21346 is listed in Android 14 security release notes under Framework with Type ID and Moderate severity. The initial description indicates a local information-disclosure via Device Idle Controller side-channel (no user interaction required). Connected notes confirm framework-level classi...

3.3CVSS3.5AI score0.00083EPSS
Save
CVE
CVE
added 2023/10/30 4:59 p.m.61 views

CVE-2023-21370

CVE-2023-21370 is an elevation-of-privilege flaw in the Android Security Element API. The root cause is an integer overflow that enables an out-of-bounds write, leading to local privilege escalation with System privileges. Exploitation requires no user interaction. The affected component is the S...

6.7CVSS6.9AI score0.00091EPSS
Save
CVE
CVE
added 2023/10/30 5:01 p.m.61 views

CVE-2023-21383

Technical details (affected product/version/root cause/fix) for CVE-2023-21383 are not publicly available in the provided connected documents. Monitor for updates.

5.5CVSS5.2AI score0.00093EPSS
Save
CVE
CVE
added 2023/09/04 2:28 a.m.61 views

CVE-2023-32807

The CVE-2023-32807 issue affects the wlan service in MediaTek-based devices, caused by an improper input validation that leads to an out-of-bounds read. This could allow local information disclosure and requires system privileges, with no user interaction needed. The vulnerability details are sup...

4.4CVSS4.3AI score0.00095EPSS
Save
CVE
CVE
added 2024/01/02 9:20 p.m.61 views

CVE-2023-4164

CVE-2023-4164 affects Google Pixel Watch. It describes a local information-disclosure vulnerability caused by a missing permission check that could expose health data without extra privileges. Public details confirm the issue but do not provide exploit specifics. Impact is focused on confidential...

8.4CVSS5.4AI score0.00084EPSS
Save
Total number of security vulnerabilities8251