CVE-2018-9485

CVE-2018-9485 affects the Android Bluetooth stack: in l2cble_process_sig_cmd of l2c_ble.cc there is an out-of-bounds read caused by a missing bounds check. This could lead to remote information disclosure over Bluetooth with no user interaction or extra privileges required. Attack vector is adjac...

CVE-2018-9490

The CVE-2018-9490 issue affects Android, specifically the CollectValuesOrEntriesImpl function in elements.cc. The root cause is a type confusion that can enable remote code execution, leading to remote escalation of privilege. The vulnerability is exploitable with user interaction and has a local...

CVE-2018-9491

CVE-2018-9491 affects Android’s media framework: in NdkMediaCodec.cpp, AMediaCodecCryptoInfo_new may trigger an out-of-bounds write caused by an integer overflow. This could allow remote code execution in external apps with no extra privileges, with user interaction required for exploitation. Aff...

CVE-2018-9513

CVE-2018-9513 describes a local privilege escalation in the Android kernel due to a memory corruption issue from a double free in the copy_process path of fork.c. The vulnerability allows a local attacker to escalate privileges without user interaction, by exploiting a double release/memory corru...

CVE-2018-9537

CVE-2018-9537 affects Google Android 9 (Android-9) and is caused by a missing bounds check in CAacDecoder_DecodeFrame within aacdecode.cpp, leading to a possible out-of-bounds write. The consequence is remote code execution in the media server with no additional execution privileges, requiring us...

CVE-2018-9565

CVE-2018-9565 affects Android 9 (Pie). The vulnerability is in readBytes of xltdecwbxml.c, caused by an integer overflow that can trigger an out-of-bounds read. This may enable remote information disclosure without extra execution privileges and without user interaction. Exploitation details are ...

CVE-2018-9570

CVE-2018-9570 affects Android 9 and involves an out-of-bounds write in impd_parse_drc_ext_v1 within impd_drc_dynamic_payload.c. The root cause is missing bounds checking in this function, which could allow remote code execution with a local attacker?no, this CVE entry states remote code execution...

CVE-2019-2041

The CVE-2019-2041 issue concerns the NFC module configuration in Android devices, where an insecure default value can cause a failure to distinguish between devices. This enables local elevation of privilege with no extra execution privileges, with user interaction required for exploitation. Affe...

CVE-2019-20563

The CVE-2019-20563 entry concerns Samsung mobile devices running O(8.x) and P(9.0) with TEEGRIS, where the SEC_FR trustlet has an out-of-bounds write. Affected component: SEC_FR trustlet; root cause: out-of-bounds write vulnerability in trustlet code. Documented impact indicates high severity (CV...

CVE-2019-20570

CVE-2019-20570 affects Samsung mobile devices running Android versions P (9.0), O (8.0), and N (7.1), where attackers can bypass Factory Reset Protection (FRP) using Smart Switch. The Red Hat, ENISA, CNVD, and other connected feeds corroborate the same FRP-bypass issue, identifying the Samsung ID...

CVE-2019-20573

CVE-2019-20573 affects Samsung mobile devices running N(7.x), O(8.x) and P(9.0). The issue is local SQL injection in the RCS Content Provider, with Samsung repair IDs SVE-2019-14059 and SVE-2019-14685 (August 2019). The NVD CVSS data indicates a high impact (CVSS3.1: Local, Privileges Required Lo...

CVE-2019-20597

CVE-2019-20597 affects Samsung mobile devices running N(7.1), O(8.x), and P(9.0). The vulnerability exists in the SPENgesture component, which can allow arbitrary applications to read or modify user-input logs. This impacts confidentiality and integrity (CVSSv3.1: 9.1, CRITICAL; CVSSv2: 6.4, MEDI...

CVE-2019-20599

Technical details for CVE-2019-20599 are not publicly available in the provided documents. The connected sources repeat the same description without concrete exploit, impact, vulnerable components, or fixes. Monitor for updates from official advisories.

CVE-2019-2069

CVE-2019-2069 affects Android 10 via a vulnerability in libxaac caused by a missing bounds check, leading to an out-of-bounds write that could cause remote code execution. The description states user interaction is required for exploitation. Connected documentation confirms the issue exists in li...

CVE-2019-2140

CVE-2019-2140 affects libxaac in Android 10, stemming from uninitialized data that can cause information disclosure. Impact: partial confidentiality loss with no full compromise; exploitation requires user interaction. Affected component is libxaac in Android 10, with Android’s release notes indi...

CVE-2019-2192

CVE-2019-2192 corresponds to a local elevation of privilege in the Android Framework (SliceProvider.java). Affected: Android 9 and 10. Description states a permissions bypass due to improper input validation, enabling a local attacker to gain additional permissions without user interaction. Impac...

CVE-2019-2193

CVE-2019-2193 affects Android 8.0–10 where a partially provisioned Device Policy Client in WelcomeActivity.java could bypass permissions, enabling local escalation of privilege and leaving an Admin app installed without user notification. Exploitation is described as local with no user interactio...

CVE-2019-2195

The CVE-2019-2195 issue affects Android, described as an input-validation flaw in tokenize of sqlite3_android.cpp that allows an attacker-controlled INSERT statement. This leads to local elevation of privilege with no additional execution privileges required and no user interaction needed. Produc...

CVE-2019-2209

CVE-2019-2209 affects Android components (BTA_DmPinReply in bta_dm_api.cc). The issue is an out-of-bounds read caused by an incorrect bounds check, leading to local information disclosure with user privileges, no user interaction required. Affected Android versions: 8.0–10.0. Connected Red Hat/NT...

CVE-2019-2211

CVE-2019-2211 involves a SQL injection in TvProvider.java’s createProjectionMapForQuery, enabling local information disclosure without extra privileges on Android 8.0–10. The issue is documented across multiple feeds (NVD, Red Hat, CVE lists, and regional advisories) with a consistent description...

CVE-2019-9234

CVE-2019-9234 affects wpa_supplicant_8 on Android 10. The issue is an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure over the network without user interaction. Exploitation details are not provided in the supplied documents. Mitigation/patch informatio...

CVE-2019-9236

CVE-2019-9236 affects Android 10 and is tied to the NFC subsystem. The root cause is a missing bounds check that enables an out-of-bounds read, leading to local information disclosure. Exploitation requires user interaction, and the impact is bounded to information disclosure with no remote code ...

CVE-2019-9285

CVE-2019-9285 describes an out-of-bounds read in Bluetooth on Android 10 due to a missing bounds check. Exploitation could lead to remote DoS without user interaction. Affected product/variant: Android 10 (Android ID: A-111215315). Public metrics: CVSSv3.1 base score 7.5 (High) with network attac...

CVE-2019-9353

CVE-2019-9353 affects Android 10 Bluetooth stack; root cause is a missing bounds check causing an out-of-bounds read, enabling potential information disclosure. NVD notes user interaction not required for exploitation in some vectors and network-based access; ZDI-19-640 details a Bluetooth heap-b...

CVE-2019-9391

CVE-2019-9391 is a vulnerability in the Android 10 libxaac library where an out-of-bounds read can occur due to uninitialized data, leading to information disclosure. The issue affects Android-10 (Android 10) and requires user interaction to exploit. The available sources in the provided document...

CVE-2019-9471

CVE-2019-9471 affects Android kernel code abc-pcie.c, specifically in set_outbound_iatu, where a missing bounds check can cause an out-of-bounds write. This leads to local elevation of privilege with system execution privileges required; exploitation does not require user interaction. Public refe...

CVE-2020-0091

CVE-2020-0091 affects the MediaTek mnld component; description in the initial docs notes an incorrect configuration in driver_cfg of mnld for meta factory mode. The entry is listed under Android/Microsoft 2020-05 release details as a High severity issue for the MediaTek mnld in the 2020-05-01 sec...

CVE-2020-0132

CVE-2020-0132 affects Android 10 via BnAAudioService::onTransact in IAAudioService.cpp, where unsafe deserialization can trigger an out-of-bounds read. The underlying bug permits local information disclosure without extra privileges or user interaction. Publicly documented references in the Pixel...

CVE-2020-0138

CVE-2020-0138 affects Android 10 with the flaw in get_element_attr_rsp of btif_rc.cc, where a missing bounds check allows an out-of-bounds write. This could enable remote code execution without additional privileges and without user interaction, typically via Bluetooth usage (though Bluetooth is ...

CVE-2020-0150

CVE-2020-0150 is tied to Android 10 and affects the rw_t3t_message_set_block_list path in rw_t3t.cc, where a missing bounds check can cause an out-of-bounds write. This leads to local escalation of privilege with no additional execution privileges required and no user interaction needed, per NVD ...

CVE-2020-0161

CVE-2020-0161 affects Android 10 (Android in the Pixel/Android Security Bulletin context) with a vulnerability in MPEG4Extractor.cpp (parseChunk). The underlying issue is resource exhaustion caused by improper input validation, leading to remote denial of service. Exploitation requires user inter...

CVE-2020-0179

CVE-2020-0179 concerns a path traversal vulnerability in Android’s MtpServer.cpp (doSendObjectInfo) caused by insufficient input validation. The issue can enable local privilege escalation with no extra privileges required; exploitation requires user interaction. Affected product: Android 10. The...

CVE-2020-0272

CVE-2020-0272 affects Android 11 components: libhwbinder. The bug is described as an information disclosure caused by uninitialized data in libhwbinder, enabling local information disclosure with system privileges; no user interaction is required. Connected sources (Red Hat, NVD, CVE lists, NCSC)...

CVE-2020-0275

CVE-2020-0275 is a local elevation-of-privilege issue in Android 11 related to the MediaProvider. The root cause is a permissions bypass that allows an app to access ContentResolver and MediaStore entries it should not reach. Impact is a local elevation of privilege with no extra execution privil...

CVE-2020-0288

CVE-2020-0288 concerns Android 11’s PackageManager, where a missing permission check could enable local information disclosure across user boundaries without any user interaction. The issue is tied to the Android 11 platform and is documented in the Android 11 Security Release Notes; Red Hat and ...

CVE-2020-0303

CVE-2020-0303 affects the Android 11 Media extractor, where a use-after-free caused by improper locking can lead to remote code execution. The issue concerns the media-extractor component (Android-11) and is described as enabling remote code execution with no or minimal privileges; exploitation r...

CVE-2020-0310

Affected software: Android 11 (Settings). The vulnerability CVE-2020-0310 arises from an unsafe PendingIntent that enables a permission bypass, leading to local information disclosure with no user interaction required. Root cause: unsafe PendingIntent handling in Settings. Impact: local informati...

CVE-2020-0315

CVE-2020-0315 affects Android 11, specifically Zen Mode, where an unsafe PendingIntent can bypass permissions to cause local information disclosure without user interaction. Root cause: unsafe PendingIntent in Zen Mode. Impact: information disclosure with Android-11 user privileges; CVSS details ...

CVE-2020-0361

CVE-2020-0361 affects Android 11 via the libDRCdec information-disclosure flaw. The root cause is uninitialized data in libDRCdec, enabling remote information disclosure with no execution privileges required; exploitation requires user interaction per the CVSS vector. Connected sources corroborat...

CVE-2020-0474

CVE-2020-0474 affects Android 11 in the Media framework (HalCamera.cpp, HalCamera::requestNewFrame). It is a use-after-free due to a race condition, enabling local elevation of privilege with no extra execution privileges required. Exploitation is local and does not require user interaction. NVD ...

CVE-2020-0475

CVE-2020-0475 affects Android 11 where in WindowManagerService.createInputConsumer there is a missing permission check, enabling a local elevation of privilege by intercepting input events. Exploitation requires user interaction; no remote access assumed. Public sources (Red Hat, NVD, CVE lists) ...

CVE-2020-0486

CVE-2020-0486 affects Android 11 (ContactsProvider2.java) via openAssetFileListener, where an insecure default value enables a permission bypass. This can allow local escalation of privilege to modify contact data with no additional execution privileges and no user interaction. The issue is ackno...

CVE-2020-10833

CVE-2020-10833 affects Samsung mobile devices running Q(10.0). The issue is in the DeX Lockscreen, which can allow attackers to access the quick panel and notifications. The Samsung internal ID is SVE-2019-16532 (March 2020). No explicit exploitation details, affected versions, or fixes are provi...

CVE-2020-10854

CVE-2020-10854 concerns information disclosure on Samsung mobile devices running O(8.x), P(9.0), or Q(10.0) software, where kernel stack addresses are leaked to userspace. The issue affects the kernel exposure path and is classified with a high impact in CVSS 3.1 (base score 7.5) and medium in CV...

CVE-2020-12749

CVE-2020-12749 refers to a buffer overflow in Samsung mobile devices’ S.LSI Wi‑Fi drivers on Exynos-based devices running P9.0. The root cause is an overflow in the Wi‑Fi driver stack (S.LSI). Impact, per CVSS data in the provided documents: local access required with potentially high impact on c...

CVE-2020-25056

CVE-2020-25056 affects Samsung mobile devices on Q(10.0) (Galaxy S20). Root cause: HAL version checks mishandled bootloading by the S.LSI NFC chipset. Impact: potential security impact described as improper checks; no exploit details provided in the documents. Affected component: HAL in Samsung A...

CVE-2020-27028

CVE-2020-27028 affects Android 11 and relates to an out-of-bounds read in filter_incoming_event of hci_layer.cc due to a missing bounds check. This can enable local information disclosure with system-level privileges, and does not require user interaction to exploit. The issue is documented acros...

CVE-2021-0370

The CVE-2021-0370 entry concerns Android 11 with a vulnerability in NxpMfcReader.cc where an out-of-bounds write occurs due to a missing bounds check. This can lead to local escalation of privilege on the NFC server with System execution privileges required; exploitation does not require user int...

CVE-2021-0410

CVE-2021-0410 affects MediaTek’s flv extractor. A faulty bounds check enables an out-of-bounds read that can disclose local information without extra privileges; user interaction is not required. The entry lists patch ALPS05561360 (Issue ALPS05561360). Connected records confirm the issue across m...

CVE-2021-0414

The CVE-2021-0414 entry relates to MediaTek’s flv extractor, where a heap buffer overflow can cause an out-of-bounds read. This may lead to local information disclosure without requiring user interaction. The available patch/issue identifiers are ALPS05561384 (Patch ID) and ALPS05561384 (Issue ID...