CVE-2022-39109

Technical details about CVE-2022-39109 are not publicly provided in the connected documents. Monitor for updates from vendors and advisories to obtain affected products, versions, and fixes.

CVE-2024-20074

CVE-2024-20074 concerns the component “dmc,” with a possible out-of-bounds write caused by a missing bounds check. This could enable local escalation of privilege to System privileges, with no user interaction required. Reported patches include Patch ID ALPS08668110 and Issue ID MSV-1333. Multipl...

CVE-2024-20108

CVE-2024-20108 affects the atci component (MediaTek chipsets). The vulnerability is an out-of-bounds write caused by a missing bounds check, enabling a local escalation of privilege with System execution privileges required. No user interaction is needed. A patch is referenced (Patch ID: ALPS0908...

CVE-2022-38697

CVE-2022-38697 affects the messaging service with a missing permission check that could allow a local attacker to access an unexpected provider in the contacts service without extra execution privileges. The NVD entry lists a CVSSv3.1 base score of 5.5 (HIGH confidentiality impact, LOCAL access, ...

CVE-2022-39080

CVE-2022-39080 concerns a missing permission check in the messaging service that could allow elevation of privilege in the contacts service without extra execution privileges. Connected documents reference the issue in UNISOC chipset contexts (SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T618/T612...

CVE-2022-39120

CVE-2022-39120 concerns a vulnerability in the kernel’s sensor driver where a missing bounds check can trigger an out-of-bounds write, enabling local denial of service. This is described consistently across sources (NVD/Red Hat/NVD enrichments) as a local, high-availability impact with a 5.5 CVSS...

CVE-2022-39850

CVE-2022-39850: The issue is an improper access control in Samsung’s mum_container_policy service, present prior to SMR Oct-2022 Release 1, allowing an unauthorized read of configuration data. Affected product area is Samsung mobile devices; root cause is inadequate access checks in the mum_conta...

CVE-2022-39896

CVE-2022-39896 affects Samsung Contacts prior to SMR Dec-2022 Release 1. The issue is improper access control that could allow access to sensitive information via implicit intents. Affected component: Contacts; root cause identified as access-control weakness. Impact described in sources as expos...

CVE-2022-47457

CVE-2022-47457 concerns the wlan driver (UNISOC chipsets) with a missing parameters check in the WLAN module, enabling local denial of service in wlan services. The root cause is insufficient input validation in the driver; affected software is described as the wlan driver, with no specific versi...

CVE-2022-48368

CVE-2022-48368 affects the UNISOC chipsets’ audio service, with the root cause described as a missing permission check in the audio service. This could allow a local attacker with low privileges and no user interaction to escalate to a high-privilege level, potentially compromising confidentialit...

CVE-2023-20626

CVE-2023-20626 affects MediaTek’s msdc module. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local escalation of privileges with System execution privileges required and no user interaction needed. Several connected records corroborate the vulnerability in msdc...

CVE-2023-20638

CVE-2023-20638 affects the ril component of MediaTek chips, caused by a missing bounds check that enables an out-of-bounds write. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation. A patch is available: ALPS...

CVE-2023-20680

The connected documents confirm CVE-2023-20680 affects the adsp component and describes an out-of-bounds write caused by improper input validation. This can enable local escalation of privilege with system execution privileges, and exploitation does not require user interaction. The public fix re...

CVE-2023-20692

CVE-2023-20692 affects wlan firmware (MediaTek-based devices) where an uncaught exception can crash the system, enabling remote denial of service without privileges or user interaction. The issue is triggered over network access (no auth/UI required). Public details consistently cite a patch: ALP...

CVE-2023-20703

CVE-2023-20703 concerns the MediaTek chip apu module where a missing bounds check can cause an out-of-bounds read, potentially exposing local information without extra privileges or user interaction. Multiple sources (NVD, Red Hat, CVE/CVE-list, PRION) corroborate the issue and its basic impact, ...

CVE-2023-20795

The CVE-2023-20795 entry describes a vulnerability in the ril module (MediaTek-based environments) where a missing bounds check enables an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required, and exploitation does not require user interaction...

CVE-2023-21320

CVE-2023-21320 concerns information disclosure via the Device Policy on Android. The issue enables an attacker to verify whether a specific admin app is registered on a device through side-channel information disclosure, resulting in local information disclosure with no additional execution privi...

CVE-2023-21360

CVE-2023-21360 affects Android Bluetooth and is characterized by an out-of-bounds write caused by improper input validation. The issue enables local elevation of privilege to System after exploitation, with no user interaction required. Public details consistently describe the vulnerability as a ...

CVE-2023-21368

CVE-2023-21368 affects Android’s Audio component, with a possible out-of-bounds read caused by a missing bounds check. The consequence is local information disclosure without requiring privileges; exploitation does not require user interaction. Multiple connected sources corroborate the issue, in...

CVE-2023-21370

CVE-2023-21370 is an elevation-of-privilege flaw in the Android Security Element API. The root cause is an integer overflow that enables an out-of-bounds write, leading to local privilege escalation with System privileges. Exploitation requires no user interaction. The affected component is the S...

CVE-2023-32838

CVE-2023-32838 concerns the MediaTek dpe module, with a reported issue of an out-of-bounds write caused by missing valid range checking. The vulnerability could enable local escalation of privilege with System execution privileges, and exploitation does not require user interaction. The available...

CVE-2023-32879

The CVE-2023-32879 entry is connected to MediaTek devices, specifically a vulnerability in the battery module where a missing bounds check allows an out-of-bounds write. This leads to local escalation of privilege with System-level execution privileges required, and exploitation is not shown as r...

CVE-2023-33889

CVE-2023-33889 describes a missing permission check in the telephony service that permits local information disclosure with no extra privileges. The NVD entry reports a CVSS v3.1 base score of 5.5 (LOCAL, LOW attack complexity, LOW privileges required, no user interaction, HIGH confidentiality im...

CVE-2023-33903

CVE-2023-33903 affects the FM service and is caused by a missing parameter check, enabling local denial of service with system execution privileges needed. Multiple connected sources corroborate a local impact and privilege requirement, with exploitation details not provided in the supplied docum...

CVE-2023-42645

The CVE-2023-42645 entry concerns a missing permission check in the sim service that allows writing permission usage records, leading to local information disclosure without extra execution privileges. Public data (NVD) assigns LOCAL attack vector, LOW privileges required, and HIGH confidentialit...

CVE-2024-56192

CVE-2024-56192 affects Google Pixel Watch: a missing bounds check in wl_notify_gscan_event (wl_cfgscan.c) enables an out-of-bounds write that could allow local privilege escalation without user interaction. Exploitation status is not provided in the supplied documents; remediation is to apply pat...

CVE-2025-32348

CVE-2025-32348 affects Android devices. The underlying issue is a missing permission check in multiple locations that can allow a background activity to be launched, enabling local elevation of privilege without additional execution privileges, and no user interaction is required to exploit. The ...

CVE-2025-48643

CVE-2025-48643 is an Android system-level issue described across multiple sources as a provisioning bypass caused by improper input validation, enabling local privilege escalation with no user interaction. The Android 17 security release notes classify it under System, with type EoP and a High se...

CVE-2026-0077

CVE-2026-0077 is linked to Android’s ActivityRecord.java resumeConfigurationDispatch, where a logic error can trigger a background application launch (bal) and enable local privilege escalation without extra privileges or user interaction. Connected sources (NVD/Red Hat/NCSC EUVD, etc.) confirm t...

CVE-2026-0098

Technical details (affected products, versions, exploit specifics, or mitigations) are not publicly available in the provided documents. Monitor for updates and rely on official advisories when they are published.

CVE-2013-7457

CVE-2013-7457 pertains to Android with Qualcomm components. Connected sources indicate a privilege-lifting vulnerability in the Qualcomm component in Android versions prior to 2016-07-05, which can be exploited by a crafted application to gain privileges. The initial description notes an unspecif...

CVE-2014-9778

CVE-2014-9778 describes an elevation-of-privilege vulnerability in the Qualcomm MSM video driver (vid_dec_set_h264_mv_buffers) on Android devices running Nexus 5 and 7 (2013) prior to 2016-07-05. The root cause is failure to validate the number of buffers in vid_dec_set_h264_mv_buffers within dri...

CVE-2014-9869

CVE-2014-9869 affects Android on Nexus 5/7 (2013) prior to 2016-08-05, where msm_isp_stats_util.c in Qualcomm components does not validate certain index values, enabling local privilege escalation via a crafted app. Connected sources confirm the issue is a privilege escalation in Mediaserver/kern...

CVE-2014-9875

CVE-2014-9875 affects Android on Nexus 7 (2013) prior to 2016-08-05. The vulnerability is in drivers/char/diag/diag_dci.c of Qualcomm components and allows privilege escalation via a crafted application that sends short DCI request packets (Android internal bug 28767589; Qualcomm bug CR483310). P...

CVE-2014-9910

CVE-2014-9910 is a local elevation-of-privilege in the Broadcom Wi‑Fi driver on Android that could allow a malicious local app to run code in kernel context. The issue requires compromising a privileged process and affects Android, with no specific patch version or remediation provided in the sup...

CVE-2014-9925

CVE-2014-9925 : In HDR on Android CAF builds using the Linux kernel, there is a vulnerability described as a Buffer Copy without Checking Size of Input. Affected component is HDR handling in CAF Android releases; root cause is unchecked input size during a copy operation, potentially enabling mem...

CVE-2014-9955

CVE-2014-9955 is an elevation-of-privilege vulnerability affecting Android, specifically in Qualcomm closed‑source components with the Android kernel as the platform. The connected CVE records confirm the issue is associated with Qualcomm closed‑source components and that fixes are not delivered ...

CVE-2014-9966

CVE-2014-9966 describes a TOCTOU race condition in Android CAF Secure Display implemented in the Linux kernel used by Android. The vulnerability affects Android releases using CAF’s Linux kernel and Secure Display, with impact on confidentiality, integrity, and availability as reflected in CVSS (...

CVE-2014-9967

CVE-2014-9967 describes an untrusted pointer dereference in the WideVine DRM component used by Android CAF builds that run on the Linux kernel. The vulnerability is located in WideVine DRM (a media/content protection feature) and is triggered by dereferencing an untrusted pointer, leading to pote...

CVE-2015-1527

CVE-2015-1527 is tied to an integer overflow in IAudioPolicyService.cpp in Android, enabling local privilege escalation via a crafted app (Android Bug ID 19261727). Public records consolidate this as a local‑privilege‑escalation flaw in the Android audio policy service. The connected sources refe...

CVE-2015-3878

The CVE-2015-3878 issue affects the Media Projection component in Android 5.x (before 5.1.1 LMY48T) and Android 6.0 (before the 2015-10-01 patch). A vulnerability arises when an application uses an excessively long name, which can bypass the screen-recording warning and allow a local attacker to ...

CVE-2015-6603

CVE-2015-6603 affects libstagefright in Android prior to 5.1.1 LMY48T. A crafted media file could cause memory corruption in mediaserver and allow remote code execution or a denial of service. The issue is identified as internal bug 23227354. Android’s October 2015 bulletin documents multiple Rem...

CVE-2015-8938

CVE-2015-8938 affects the MSM camera driver in Qualcomm components on Nexus 6 devices, where input parameter validation is incomplete, enabling privilege escalation via a crafted application. The issue is documented across multiple sources (e.g., CNVD-2016-06244) as a Nexus 6 privilege-acquisitio...

CVE-2015-9008

CVE-2015-9008 is an elevation-of-privilege vulnerability in Qualcomm closed‑source components used by Android kernel (Android ID A-36384689). The issue is described as a privilege escalation in Qualcomm components; no public exploitation details are provided in the connected docs. Remediation is ...

CVE-2015-9014

CVE-2015-9014 is an Elevation of Privilege in Qualcomm closed‑source components affecting Android kernel. The vulnerability is described as a privilege escalation within Qualcomm components integrated into Android; impact is elevated privileges without user interaction. The Connected documents co...

CVE-2015-9024

CVE-2015-9024 concerns Android CAF builds: in all CAF Android releases that use the Linux kernel, certain interfaces were improperly exposed to QTEE applications. The connected documents do not provide a specific affected product/version beyond this CAF/Linux-kernel context, nor do they describe ...

CVE-2015-9031

CVE-2015-9031 arises in all Android CAF builds that use the Linux kernel, where a TZ memory address is exposed to the high-level OS (HLOS) by the HDCP component. The root cause is a leakage of a TZ memory address, enabling information disclosure within the system. The available documents do not s...

CVE-2015-9054

Technical details for CVE-2015-9054 are not provided in the connected documents; no explicit affected products, versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2016-0844

The CVE-2016-0844 issue affects the Qualcomm RF driver in Android 6.x prior to 2016-04-01. The underlying flaw is improper restriction of socket ioctl calls, enabling a local attacker with a crafted app to execute code with kernel context privileges (privilege escalation). This vulnerability is l...

CVE-2016-10280

CVE-2016-10280 is an elevation of privilege in the MediaTek thermal driver that could allow a local malicious Android app to execute code in the kernel. The issue requires compromising a privileged process and is rated High. Per the 2017-05 Android bulletin, the patch is not publicly available an...