CVE-2023-20648

CVE-2023-20648 affects the ril module in MediaTek chips. Root cause: missing bounds check causing an out-of-bounds read. Impact: local information disclosure with system execution privileges required; exploitation requires no user interaction. Patch ID: ALPS07628612. Multiple connected sources (N...

CVE-2023-20651

CVE-2023-20651 concerns the MediaTek apu component, where a missing bounds check enables an out-of-bounds read. This could lead to local information disclosure with System execution privileges needed; no user interaction is required. Public details consistently identify the vulnerability in apu a...

CVE-2023-20687

CVE-2023-20687 describes a race-condition that can cause a double free in the display DRM component, enabling local escalation of privileges to SYSTEM level without user interaction. The vulnerability is associated with a patch ID ALPS07570772 (Issue ID ALPS07570772). Exploitation status is not p...

CVE-2023-20700

CVE-2023-20700 affects Widevine in MediaTek chips. The vulnerability is described as an out-of-bounds write caused by a logic error, enabling local escalation of privilege with System execution privileges required; user interaction is not needed. Patch ID ALPS07643304 (Issue ALPS07643304) is refe...

CVE-2023-20785

Summary: CVE-2023-20785 describes a potential out-of-bounds write in the audio component due to a missing bounds check, enabling local escalation of privilege to system execution level. The vulnerability is described with no user interaction required. Affected component: Audio subsystem (MediaTek...

CVE-2023-20786

The CVE-2023-20786 entry concerns the MediaTek GPS component. A missing bounds check enables an out-of-bounds write, leading to local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. A patch entry is noted as ALPS07767811 (Issue AL...

CVE-2023-20803

Summary: CVE-2023-20803 affects the imgsys component of MediaTek microprogram software, where memory corruption can occur due to improper input validation. This leads to local privilege escalation with system execution privileges required and user interaction needed for exploitation. Technical de...

CVE-2023-20815

The CVE-2023-20815 issue affects MediaTek WLAN software. Affected component: WLAN service; root cause: out-of-bounds write due to improper input validation. Impact: local escalation of privilege with System execution privileges required; no user interaction needed. Remediation: patch ALPS07453587...

CVE-2023-21297

CVE-2023-21297 affects SEPolicy in Android, enabling a permissions bypass to access the factory MAC address. This can cause local information disclosure with System execution privileges required and does not require user interaction. The connected Red Hat, CNVD, and other sources reiterate the sa...

CVE-2023-21346

CVE-2023-21346 is listed in Android 14 security release notes under Framework with Type ID and Moderate severity. The initial description indicates a local information-disclosure via Device Idle Controller side-channel (no user interaction required). Connected notes confirm framework-level classi...

CVE-2023-21370

CVE-2023-21370 is an elevation-of-privilege flaw in the Android Security Element API. The root cause is an integer overflow that enables an out-of-bounds write, leading to local privilege escalation with System privileges. Exploitation requires no user interaction. The affected component is the S...

CVE-2023-21383

Technical details (affected product/version/root cause/fix) for CVE-2023-21383 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2023-32807

The CVE-2023-32807 issue affects the wlan service in MediaTek-based devices, caused by an improper input validation that leads to an out-of-bounds read. This could allow local information disclosure and requires system privileges, with no user interaction needed. The vulnerability details are sup...

CVE-2023-4164

CVE-2023-4164 affects Google Pixel Watch. It describes a local information-disclosure vulnerability caused by a missing permission check that could expose health data without extra privileges. Public details confirm the issue but do not provide exploit specifics. Impact is focused on confidential...

CVE-2023-44122

Summary (CVE-2023-44122): The LG LockScreenSettings app suffers a local-privelege issue where implicit intents can be intercepted by other apps on the same device, allowing theft of files via onActivityResult(). The attacker could cause the app to copy a received file to “/data/shared/dw/mycatego...

CVE-2023-44125

CVE-2023-44125 affects the Personalized service app (com.lge.abba). The issue is use of implicit PendingIntents without PendingIntent.FLAG_IMMUTABLE, which could enable an attacker’s app (with access to notifications) to hijack intents, intercept them, and then obtain permissions to content provi...

CVE-2023-52351

The CVE-2023-52351 issue affects the ril service in UNISOC chipsets, caused by a missing bounds check that enables an out-of-bounds write. This could lead to local denial of service with System execution privileges required. Affected component: ril service (UNISOC). Impact is described as local D...

CVE-2024-20074

CVE-2024-20074 concerns the component “dmc,” with a possible out-of-bounds write caused by a missing bounds check. This could enable local escalation of privilege to System privileges, with no user interaction required. Reported patches include Patch ID ALPS08668110 and Issue ID MSV-1333. Multipl...

CVE-2024-43766

CVE-2024-43766 describes an information-disclosure vulnerability in the Android Bluetooth stack caused by invalid error handling in multiple functions of a file named btm_ble_sec.cc . The issue could enable remote information disclosure to a proximal/adjacent attacker with no additional execution...

CVE-2025-22414

CVE-2025-22414 concerns a local elevation of privilege in FrpBypassAlertActivity.java due to a missing permission check, enabling FRP bypass without user interaction. Public sources identify the Wear OS/System component context and classify the issue as High severity with local access required (A...

CVE-2026-0032

CVE-2026-0032 describes a possible out-of-bounds write in multiple functions of the mem_protect.c file, caused by a logic error, enabling local escalation of privilege with no additional execution privileges and without user interaction. The affected component appears to be kernel/media-related c...

CVE-2026-0061

CVE-2026-0061 involves multiple functions of WindowState.java where a tapjacking/overlay condition could trick a user into accepting a permission. The issue allows local privilege escalation with no additional execution privileges and does not require user interaction for exploitation, per the pr...

CVE-2026-0095

The provided CVE-2026-0095 entries describe a vulnerability in the Bluetooth stack, specifically in the function l2c_fcr_clone_buf in l2c_fcr.cc. The issue is an integer overflow that can trigger controlled heap corruption within the privileged Bluetooth process, leading to local escalation of pr...

CVE-2014-9411

CVE-2014-9411 concerns a Qualcomm/CAF Android stack issue: in CAF Android releases using the Linux kernel, an out-of-range pointer offset in rollback protection could be triggered. The vulnerability affects Qualcomm components within Android devices and is described as an out-of-range pointer off...

CVE-2014-9779

CVE-2014-9779 affects the Android kernel component arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c (Qualcomm) on Nexus 5, where Android builds before 2016-07-05 allow an attacker to read kernel memory via a crafted offset. The entry identifies Android internal bug 28598347 and Qualcomm bug CR548679 as ...

CVE-2014-9874

CVE-2014-9874 is a buffer overflow in Qualcomm components of Android (before 2016-08-05) affecting Nexus 5, 5X, 6P and 7 (2013). The root cause is memory corruption in audio_utils.c and q6asm.c (Android internal bug 28751152; Qualcomm bug CR563086). Impact is privilege escalation via a crafted ap...

CVE-2014-9901

CVE-2014-9901 affects the Qualcomm Wi‑Fi driver on Nexus 7 (2013) devices running Android prior to the 2016-08-05 patch. The issue stems from incorrect snprintf calls in the Qualcomm Wi‑Fi driver, allowing a remote attacker to trigger a denial of service (device hang or reboot) via crafted frames...

CVE-2014-9954

CVE-2014-9954 is an elevation of privilege vulnerability in Qualcomm closed‑source components used by Android. Affected product: Android kernel. Root cause details are not fully disclosed in the provided documents, but the NVD entry lists an elevation of privilege impact with a as‑is Android kern...

CVE-2014-9966

CVE-2014-9966 describes a TOCTOU race condition in Android CAF Secure Display implemented in the Linux kernel used by Android. The vulnerability affects Android releases using CAF’s Linux kernel and Secure Display, with impact on confidentiality, integrity, and availability as reflected in CVSS (...

CVE-2014-9971

CVE-2014-9971 affects Qualcomm components in Android CAF builds using the Linux kernel. The vulnerability arises when asserts are disabled, causing an instruction inside an assert to be skipped and enabling incorrect control flow. NVD lists a CVSSv3 base score of 9.8 (CRITICAL) with NETWORK attac...

CVE-2014-9973

CVE-2014-9973 describes a buffer-length validation flaw in the PlayReady DRM routine within Qualcomm closed‑source components used in Qualcomm/CAF Android builds on the Linux kernel. The underlying issue is missing validation of buffer length in the DRM pathway, which could enable a remote attack...

CVE-2014-9975

CVE-2014-9975 describes a rollback vulnerability in the Full Disk Encryption (FDE) component affecting Qualcomm closed‑source code used in Android CAF/Linux kernel builds. The issue is documented across multiple sources (NVD/CVE pages) as related to Qualcomm FDE, with a high‑severity impact profi...

CVE-2015-3878

The CVE-2015-3878 issue affects the Media Projection component in Android 5.x (before 5.1.1 LMY48T) and Android 6.0 (before the 2015-10-01 patch). A vulnerability arises when an application uses an excessively long name, which can bypass the screen-recording warning and allow a local attacker to ...

CVE-2015-8594

CVE-2015-8594 is a buffer over-read vulnerability reported for Qualcomm CAF Android builds using the Linux kernel, affecting Qualcomm components in the RFA-1x area. The NVD entry lists a highly severe impact (CVSSv3 base score 9.8, CRITICAL) with network attack vector and no user interaction, ind...

CVE-2015-8996

CVE-2015-8996 describes a time-of-check time-of-use race condition in a TrustZone QFPROM routine affecting Android builds from CAF using the Linux kernel. The issue centers on the TrustZone protected QFPROM path; the root cause is a TOCTOU race in the QFPROM routine, potentially enabling incorrec...

CVE-2015-9007

Technical details for CVE-2015-9007 are not publicly available in the provided documents. No specifics on affected components, root cause, impact, or remediation are provided here. Monitor for updates.

CVE-2015-9029

CVE-2015-9029 is an Android CAF/Linux kernel vulnerability affecting the access control settings of modem memory. The issue is described as a memory-access control flaw in CAF Android releases, with a CVSS v3 base score of 7.8 (HIGH) and local attack vector requiring user interaction, impacting c...

CVE-2015-9071

CVE-2015-9071 describes a buffer over-read in a TrustZone syscall present in all Qualcomm products with Android CAF builds using the Linux kernel. The vulnerability affects Qualcomm components integrated in Android and is triggered via a TrustZone interface, enabling a high-impact condition consi...

CVE-2016-0812

The CVE-2016-0812 entry concerns the Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and Android 6.0 before 2016-02-01. The vulnerability arises from the interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java, where setup completion is not ...

CVE-2016-0832

The CVE-2016-0832 issue is a Setup Wizard vulnerability in Android: versions 5.1.x prior to LMY49H and 6.x prior to 2016-03-01 are affected. A physically proximate attacker could bypass Factory Reset Protection and delete data via unspecified vectors (internal bug 25955042). The connected sources...

CVE-2016-0847

The CVE affects the Android Telecom component on Android 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-04-01). The issue allows a crafted app with Signature or SignatureOrSystem access to spoof the originating telephone number of a call. The impact is limited to local attacker ...

CVE-2016-10242

CVE-2016-10242 describes a time-of-check time-of-use race condition in the secure file system used by CAF Android builds that rely on the Linux kernel. The root cause is a TOCTOU race allowing inconsistent file-system state during security checks, potentially enabling unauthorized access or behav...

CVE-2016-10282

CVE-2016-10282 is an elevation of privilege in the MediaTek thermal driver on Android. A local malicious application could execute arbitrary code in the kernel context by exploiting this driver after compromising a privileged process. Affected component: MediaTek thermal driver (Android). The pro...

CVE-2016-11029

CVE-2016-11029 affects Samsung mobile devices on L(5.0/5.1), M(6.0), and N(7.0). The vulnerability arises from an unprotected intent that allows attackers to read the Mobile Hotspot password from logs. The description in multiple sources confirms the root cause and the impact: disclosure of hotsp...

CVE-2016-11030

The CVE-2016-11030 issue affects Samsung mobile devices running KK/4.4, L/5.0-5.1, and M/6.0 with Hrm sensor support. The MAX86902 sensor driver sysfs allows concurrent access, enabling a race condition that results in a heap-based buffer overflow. This is the concrete vulnerability described in ...

CVE-2016-2410

CVE-2016-2410 is a local privilege-escalation vulnerability in the Qualcomm video kernel driver used by Android 6.x. The issue allows a crafted app that gains control over a service capable of invoking the driver to elevate privileges due to an internal bug (26291677). The Android security bullet...

CVE-2016-2413

CVE-2016-2413 affects Android mediaserver: media/libmedia/IOMX.cpp in mediaserver does not initialize a handle pointer. This vulnerability enables a local attacker to gain privileges via a crafted application, demonstrated by obtaining Signature or SignatureOrSystem access. Affected Android versi...

CVE-2016-2415

Technical details for CVE-2016-2415 are not publicly provided in the supplied documents. The available records summarize an information-disclosure vulnerability in Exchange ActiveSync/Autodiscover without specifics on affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2016-2422

CVE-2016-2422 describes an Android Wi‑Fi elevation vulnerability where a Wi‑Fi CA certificate could be used in an unrelated CA role, enabling privilege escalation via a crafted app to gain Signature or SignatureOrSystem privileges. Affected: Android 4.x up to 4.4.3; 5.0.x up to 5.0.1; 5.1.x up to...

CVE-2016-2423

CVE-2016-2423 concerns the Telephony component in Android, specifically server/telecom/CallsManager.java, where provisioning status is not properly checked. This allows physically proximate attackers to bypass Factory Reset Protection (FRP) and delete data via unspecified vectors. Affected versio...