CVE-2020-0220

CVE-2020-0220 corresponds to an out-of-bounds write in the Android kernel driver flow for msm-cirrus playback (crus_afe_callback in msm-cirrus-playback.c). The underlying issue is a missing bounds check in that path, enabling local escalation of privilege with System-level execution privileges re...

CVE-2020-0235

CVE-2020-0235 affects Android’s kernel, specifically the crus_sp_shared_ioctl path where 4 bytes are copied from userdata into the size variable and then used as the size for copy_from_user, overwriting memory following crus_sp_hdr (a static struct crus_sp_ioctl_header). This memory corruption ca...

CVE-2020-0262

CVE-2020-0262 affects Android 11 and stems from an unsafe PendingIntent used in WiFi tethering, enabling local elevation of privilege with user execution privileges needed and no user interaction required. The issue is categorized as EoP, with impact on confidentiality/ integrity/ availability as...

CVE-2020-0286

The CVE-2020-0286 entry describes a vulnerability in Android 11's Bluetooth AVRCP where residual data can leak audio metadata, enabling remote information disclosure without privileges or user interaction via a network vector. Affected software is Android 11 (Bluetooth AVRCP); the underlying issu...

CVE-2020-0310

Affected software: Android 11 (Settings). The vulnerability CVE-2020-0310 arises from an unsafe PendingIntent that enables a permission bypass, leading to local information disclosure with no user interaction required. Root cause: unsafe PendingIntent handling in Settings. Impact: local informati...

CVE-2020-0490

CVE-2020-0490 affects Android 11. The issue is in floor1_info_unpack of floor1.c and stems from a missing bounds check, causing an out-of-bounds read that can disclose information. Exploitation requires user interaction. The impact is information disclosure with no additional execution privileges...

CVE-2020-10833

CVE-2020-10833 affects Samsung mobile devices running Q(10.0). The issue is in the DeX Lockscreen, which can allow attackers to access the quick panel and notifications. The Samsung internal ID is SVE-2019-16532 (March 2020). No explicit exploitation details, affected versions, or fixes are provi...

CVE-2020-12749

CVE-2020-12749 refers to a buffer overflow in Samsung mobile devices’ S.LSI Wi‑Fi drivers on Exynos-based devices running P9.0. The root cause is an overflow in the Wi‑Fi driver stack (S.LSI). Impact, per CVSS data in the provided documents: local access required with potentially high impact on c...

CVE-2020-12751

CVE-2020-12751 affects Samsung mobile devices running O(8.X), P(9.0), and Q(10.0). The Quram image codec library is vulnerable to memory overwrite via crafted JPEG data during decoding, enabling arbitrary code execution on impact. Public sources (NVD, Red Hat, CNVD, and related CVE records) consi...

CVE-2020-25056

CVE-2020-25056 affects Samsung mobile devices on Q(10.0) (Galaxy S20). Root cause: HAL version checks mishandled bootloading by the S.LSI NFC chipset. Impact: potential security impact described as improper checks; no exploit details provided in the documents. Affected component: HAL in Samsung A...

CVE-2020-25058

CVE-2020-25058 affects LG mobile devices running Android 8.0–10, where the network_management service fails to properly restrict configuration changes. Root cause: insufficient access control in the network_management component. Impact is stated as high across confidentiality, integrity, and avai...

CVE-2020-35555

The CVE-2020-35555 entry concerns LG mobile devices running Android 10 with dual-screen support. The issue is that, when a call is disconnected while the cover is closed, the device does not lock as expected, potentially leaving the device accessible without authentication. The details specify th...

CVE-2021-0357

Technical details about CVE-2021-0357 are not publicly available in the provided Connected documents. The descriptions reiterate an out-of-bounds write in netdiag affecting Android 10/11 with local privilege escalation. Monitor for updates.

CVE-2021-0361

Technical details about CVE-2021-0361 are not publicly available in the provided connected documents. Monitor for updates; current sources reiterate the same vulnerable description without additional specifics.

CVE-2021-0363

CVE-2021-0363 affects Android (Android-10 and Android-11) with vulnerability in the mobile_log_d component, caused by a missing bounds check that enables command injection and local escalation of privilege to SYSTEM without user interaction. The issue is documented in multiple sources (e.g., Andr...

CVE-2021-0410

CVE-2021-0410 affects MediaTek’s flv extractor. A faulty bounds check enables an out-of-bounds read that can disclose local information without extra privileges; user interaction is not required. The entry lists patch ALPS05561360 (Issue ALPS05561360). Connected records confirm the issue across m...

CVE-2021-0530

CVE-2021-0530 is an Android memory management driver vulnerability described across multiple sources as an out-of-bounds write caused by uninitialized data, enabling local privilege escalation with no user interaction required. Connected data identify affected component as the Android memory mana...

CVE-2021-0531

CVE-2021-0531 affects the memory management driver in Android, specifically MTK memory management components, with a use-after-free leading to local privilege escalation and high impact as described in multiple sources. The vulnerability is a memory corruption issue in the memory management drive...

CVE-2021-0533

CVE-2021-0533 affects the Android memory management driver (Memory management on Android SoC) and is caused by a race condition that can lead to memory corruption. The documented impact is local escalation of privilege with no additional execution privileges required and no user interaction neede...

CVE-2021-0610

CVE-2021-0610 affects Mediatek memory management driver. Reported issue is a memory corruption caused by an integer overflow, enabling local privilege escalation with no user interaction required (LOCAL, LOW complexity). Documents consistently describe a patch identified as ALPS05403499 (Issue AL...

CVE-2021-0620

CVE-2021-0620 affects the asf extractor component, where an out-of-bounds read caused by a heap buffer overflow could lead to local information disclosure without additional execution privileges. Exploitation details are not provided in the documents. The issue is associated with a patch: ALPS054...

CVE-2021-0621

In the asf extractor component, CVE-2021-0621 describes a possible out-of-bounds read caused by an integer overflow. This could lead to local information disclosure without requiring user interaction or additional execution privileges. A patch is available (ALPS05489178; ALPS05561383). The issue ...

CVE-2021-0633

CVE-2021-0633 affects the Mediatek display driver. It arises from an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation to System level with no user interaction required. Patch ID: ALPS05585423 (Issue ALPS05585423) is noted as remediation. Connected sourc...

CVE-2021-0656

CVE-2021-0656 affects the edma driver and is characterized by a use-after-free memory corruption leading to local escalation of privilege with System execution privileges required. Public descriptions consistently note no user interaction is needed for exploitation. The issue is tied to the edma ...

CVE-2021-0665

CVE-2021-0665 concerns the apusys subsystem. Affected component: apusys (likely MediaTek-based). Root cause: an out-of-bounds read caused by an incorrect bounds check. Impact: local information disclosure with system execution privileges required; no user interaction needed. Exploitation status i...

CVE-2021-0668

The CVE-2021-0668 entry refers to a memory corruption issue in the apusys component caused by incorrect error handling, enabling local privilege escalation to System level with no user interaction required. Patch ALPS05670521 (Issue ALPS05670521) is noted as a fix. Connected documents (e.g., Red ...

CVE-2021-0894

In CVE-2021-0894, the apusys component contains an out-of-bounds write due to a missing bounds check. This can enable local escalation of privilege to SYSTEM with no user interaction required. Patch ID ALPS05672107 and Issue ID ALPS05672038 are associated remediation details. Exploitation status ...

CVE-2021-25391

CVE-2021-25391 is an Intent redirection vulnerability in Samsung Secure Folder prior to SMR MAY-2021 Release 1. The issue allows an attacker to execute a privileged action through intent redirection. Affected: Secure Folder component on Samsung devices; impact per CVSSv3.1: base score 4.0 (MEDIUM...

CVE-2021-25417

CVE-2021-25417 affects the SDP SDK prior to Samsung SMR JUN-2021 Release 1, where improper authorization allows access to internal storage. The vulnerability is documented across multiple sources (NVD entry; Red Hat advisory; PRION; CVE listing; CNNVD) with CVSS v3.1 base score 7.5 (Network, Low ...

CVE-2021-25427

CVE-2021-25427 describes a SQL injection vulnerability in Bluetooth prior to the Samsung SMR July-2021 Release 1, enabling unauthorized access to data on paired devices. The vulnerability is tied to the Bluetooth module's handling of SQL statements, with documented impact being access to paired d...

CVE-2021-25454

CVE-2021-25454 corresponds to an OOB read in the libsaacextractor.so library, vulnerability class affecting Samsung SMR components prior to the September 2021 Release 1. The flaw enables remote DoS via a crafted AAC file, as described across multiple sources (NVD/Red Hat/CVE records). Technical c...

CVE-2021-25455

Summary: CVE-2021-25455 is an OOB read vulnerability in the libsaviextractor.so library, reported to affect the pre-SMR Sep-2021 Release 1. The available descriptions state that an attacker could access an arbitrary memory address via a forged AVI file, via a crafted input, with a local attack ve...

CVE-2021-25457

The CVE-2021-25457 report concerns a vulnerability in Samsung’s DSP driver prior to the SMR September 2021 Release 1. The issue is an improper input validation that allows a local attacker to obtain a limited amount of kernel memory information, affecting kernel memory confidentiality. Affected c...

CVE-2021-25473

CVE-2021-25473 affects Samsung Galaxy SystemUI prior to SMR Oct-2021 Release 1. The issue is an improper exception handling for the multi_sim_bar_hide_by_meadia_full value, which can allow a local attacker to cause a permanent denial of service on the user device before factory reset. Supported m...

CVE-2021-25502

CVE-2021-25502 relates to Samsung SMR (System Management Release) before the Nov-2021 Release 1, where sensitive data was stored insecurely in Property Settings, allowing a local attacker to read the ESN value without privileges. Affected product scope is Samsung SMR updates for Android/mobile de...

CVE-2021-25511

The CVE-2021-25511 issue affects Samsung FilterProvider prior to SMR Dec-2021 Release 1 and is described as an improper validation/path traversal vulnerability that enables an attacker to write arbitrary files. Documents consistently tie this to a path traversal flaw and do not provide exploit co...

CVE-2022-20312

In Android 13, the WifiP2pManager can leak the device’s WiFi P2P MAC address without user consent due to a missing permission check. This enables local information disclosure with a Local attack vector and no user interaction required. Affected component: WifiP2pManager in Android 13. Root cause:...

CVE-2022-32644

CVE-2022-32644 concerns a race-condition-induced use-after-free in vow, leading to local escalation of privilege with System privileges required. Public documentation consistently describes the vulnerability as local, with no user interaction needed for exploitation. The primary impact is the pot...

CVE-2022-39093

CVE-2022-39093 describes a missing permission check in the power management service that can allow a setup of the service without additional execution privileges. The vulnerability is characterized as local, with low attack complexity and no user interaction, and has a CVSS v3.1 base score of 7.8...

CVE-2022-39094

CVE-2022-39094 affects the power management service, where a missing permission check enables setting up the service with no additional privileges. The vulnerability is triggered locally (attack vector: LOCAL) with low privilege requirements and no user interaction, and has high impact on confide...

CVE-2022-39110

CVE-2022-39110 describes a missing permission check in the Music service that could allow elevation of privilege with no additional execution privileges required. The vulnerability is identified across multiple sources (NVD, Red Hat, CVE lists, PRION, CNNVD, etc.), all reiterating the same issue:...

CVE-2022-39855

CVE-2022-39855 is a local-improper access-control vulnerability in the FACM application prior to Samsung SMR Oct-2022 Release 1. The issue allows a local attacker to connect to arbitrary AP and Bluetooth devices due to insufficient access controls in FACM. Affected context: Samsung mobile devices...

CVE-2022-47477

CVE-2022-47477 affects the telephony service, with a missing permission check leading to local information disclosure without requiring additional execution privileges. The linked documents consistently describe a zero-day-style local disclosure risk via the telephony module (e.g., UNISOC telepho...

CVE-2022-47494

CVE-2022-47494 affects UNISOC chipsets’ soter service module. The root cause is a missing bounds check causing an out-of-bounds write, with impact described as local denial of service and potential for system-level execution privileges. Connected sources consistently reference this description ac...

CVE-2022-48241

The CVE-2022-48241 entry describes a vulnerability in the telephony service caused by a missing permission check that could enable local denial of service without additional execution privileges. The issue is referenced across multiple sources (NVD, Red Hat, CVE listing) with a common impact and ...

CVE-2022-48382

CVE-2022-48382 concerns UNISOC chipsets’ log service. The root cause is a missing bounds check that enables an out-of-bounds write. Impact described as local denial of service with system privileges required. Exploitation details are not provided in the connected documents. Remediation/patch info...

CVE-2022-48384

CVE-2022-48384 affects the srtd service on UNISOC chipsets. The root cause is a missing permission check that can lead to local escalation of privilege with no extra execution privileges. The CVSSv3.1 base score is 7.8 (LOCAL, LOW privileges required, HIGH impact on confidentiality, integrity, an...

CVE-2022-48441

CVE-2022-48441 affects Unisoc-based devices where the dialer service may perform a missing permission check, enabling local denial of service with no additional privileges. The issue is described across multiple sources as a local impact vulnerability (attack vector: local; impact: availability)....

CVE-2023-20647

This CVE (CVE-2023-20647) affects the ril module in MediaTek chips. The root cause is a missing bounds check that enables an out-of-bounds read, leading to local information disclosure with system execution privileges required. Exploitation is described as not requiring user interaction. Patch ID...

CVE-2023-20649

The CVE-2023-20649 entry concerns the MediaTek ril module. A missing bounds check can cause an out-of-bounds read, enabling local information disclosure with system execution privileges required. Exploitation does not require user interaction, but the vulnerability is confirmed as LOCAL with HIGH...