CVE-2021-0668

The CVE-2021-0668 entry refers to a memory corruption issue in the apusys component caused by incorrect error handling, enabling local privilege escalation to System level with no user interaction required. Patch ALPS05670521 (Issue ALPS05670521) is noted as a fix. Connected documents (e.g., Red ...

CVE-2021-0669

In apusys, the vulnerability is a memory corruption due to a use-after-free, enabling local escalation of privilege with SYSTEM execution privileges required and no user interaction. The CVE entry notes this affects the apusys component and lists patch ID ALPS05681550 / Issue ID ALPS05681550 as t...

CVE-2021-1038

CVE-2021-1038 describes a DoS via a tapjacking/overlay vulnerability in UserDetailsActivity of AndroidManifest.xml, affecting Android 9–12. The root cause is an overlay/tapjacking issue that can cause local denial of service with no extra privileges; exploitation requires user interaction per CVS...

CVE-2021-25385

The CVE-2021-25385 entry concerns an input-validation flaw in the libsdffextractor library, specifically in the sdfffd_parse_chunk_PROP() function, which can lead to remote arbitrary code execution on the mediaextractor process. Connected sources confirm the issue affects SamsungLibsdffextractor ...

CVE-2021-25388

Samsung Knox Core CVE-2021-25388 is described as an improper caller check vulnerability that, in Knox Core prior to SMR MAY-2021 Release 1, could let a local attacker install arbitrary third‑party apps. Connected sources (NVD, Red Hat, CNNCVD/CVE lists) corroborate: local access, low complexity, ...

CVE-2021-25430

CVE-2021-25430 is an improper access control vulnerability in a Bluetooth application, allowing untrusted apps to access Bluetooth information. Root cause: access-control failure in the Bluetooth component. Impact: confidentiality exposure at a LOW level (C:L) per CVSS3.1 (AV:A, AC:L, PR:N, UI:N,...

CVE-2021-25456

CVE-2021-25456 affects the libswmfextractor.so component. The vulnerability is described as an out-of-bounds read that enables an attacker to cause a memcpy at an arbitrary address via a forged WMF file, implying memory corruption with possible in-memory impact. According to the sources, this is ...

CVE-2021-25473

CVE-2021-25473 affects Samsung Galaxy SystemUI prior to SMR Oct-2021 Release 1. The issue is an improper exception handling for the multi_sim_bar_hide_by_meadia_full value, which can allow a local attacker to cause a permanent denial of service on the user device before factory reset. Supported m...

CVE-2021-25502

CVE-2021-25502 relates to Samsung SMR (System Management Release) before the Nov-2021 Release 1, where sensitive data was stored insecurely in Property Settings, allowing a local attacker to read the ESN value without privileges. Affected product scope is Samsung SMR updates for Android/mobile de...

CVE-2021-25515

Samsung SemRewardManager on Android is affected by CVE-2021-25515 due to improper usage of implicit intents, enabling an attacker with local access to read the device’s BSSID. The root cause is an implicit-intent misuse in SemRewardManager prior to SMR Dec-2021 Release 1, leading to information d...

CVE-2022-20020

CVE-2022-20020 affects the libvcodecdrv component (noted in multiple sources, including Red Hat and CVE listings) where a missing bounds check can cause local information disclosure without requiring privileges or user interaction. Impact is confirmed as information disclosure; no exploitation ve...

CVE-2022-20022

CVE-2022-20022 concerns Bluetooth: a link disconnection can occur when a connection attempt comes from a host with the same BD_ADDR as the currently connected BT host. Documents consistently state this could enable a remote denial of service without extra privileges and with no user interaction r...

CVE-2022-20312

In Android 13, the WifiP2pManager can leak the device’s WiFi P2P MAC address without user consent due to a missing permission check. This enables local information disclosure with a Local attack vector and no user interaction required. Affected component: WifiP2pManager in Android 13. Root cause:...

CVE-2022-32611

CVE-2022-32611 concerns MediaTek’s isp component. The vulnerability is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privileges with System execution privileges required. Exploitation reportedly does not require user interaction. A patch is referenced (Patc...

CVE-2022-32648

The CVE-2022-32648 entry describes a use-after-free due to a race condition in the disp component, enabling local privilege escalation with SYSTEM privileges and no user interaction. Multiple sources (NVD/Red Hat/PRION/CVE records) confirm the issue and the same patch identifier: ALPS06535964 (Is...

CVE-2022-39092

CVE-2022-39092 concerns a missing permission check in the power management service. The vulnerability allows a local attacker with LOW privileges and NO user interaction to set up the power management service without additional execution privileges, yielding HIGH impact to confidentiality, integr...

CVE-2022-39116

The CVE-2022-39116 entry affects the sprd_sysdump driver, where a missing bounds check leads to an out-of-bounds write. The underlying issue can cause local denial of service in the kernel. Multiple sources (NVD, Red Hat, CVE listing) confirm the same description; exploitation details or in-the-w...

CVE-2022-39882

CVE-2022-39882 is a heap overflow in the sflacf_fal_bytes_peek function of the libsmat.so library, prior to Samsung SMR Nov-2022 Release 1. The vulnerability allows a local attacker to execute arbitrary code. Affected component is the libsmat.so library; the root cause is a heap overflow in the s...

CVE-2022-44422

CVE-2022-44422 affects the music service via a missing permission check, enabling local denial of service in the contacts service. The vulnerability is exploitable with local access and low privileges (UI:N, C:N, I:N, A:H; S:U). No public details on affected product versions or fixes are provided...

CVE-2022-47476

CVE-2022-47476 concerns the telephony service where a missing permission check could allow local information disclosure without additional privileges. The vulnerability is described consistently across multiple feeds (NVD, Red Hat, CNVD/CNNVD, PRION, CVE list, etc.) as enabling access to sensitiv...

CVE-2022-48388

The CVE-2022-48388 entry concerns UNISOC Chipsets’ powerEx service module. The vulnerability arises from a missing permission check in the powerEx service, enabling local escalation of privilege with no additional execution privileges. Affected component: powerEx service on UNISOC chipsets. Impac...

CVE-2023-20658

CVE-2023-20658 impacts the isp component, with an out-of-bounds write caused by a missing bounds check. This enables local privilege escalation to System execution privileges without user interaction. The vulnerability is documented with Patch ID ALPS07537393 and Issue ID ALPS07180396. Exploitati...

CVE-2023-20664

CVE-2023-20664: In gz, a double-free caused by a use-after-free leads to local escalation of privilege with System privileges required; no user interaction is needed for exploitation. Connected sources report patch ALPS07505952 (Issue ALPS07505952). Details across multiple feeds consistently desc...

CVE-2023-20666

CVE-2023-20666 concerns a MediaTek display DRM component with an out-of-bounds write caused by a missing bounds check. The vulnerability enables local privilege escalation to System level without user interaction. The issue is indicated to affect the Display DRM path, with a patch identifier ALPS...

CVE-2023-20688

CVE-2023-20688 describes an out-of-bounds read due to a missing bounds check in Power, potentially enabling local information disclosure with SYSTEM privileges; exploitation is LOCAL with no user interaction required, and a patch is identified as ALPS07441821 (Issue ALPS07441821). Several connect...

CVE-2023-20709

CVE-2023-20709 affects the keyinstall module in MediaTek systems. The issue is an out-of-bounds read caused by a missing bounds check, leading to potential local information disclosure and requiring System execution privileges for exploitation. User interaction is not needed. References to patche...

CVE-2023-20717

CVE-2023-20717 relates to the vcu module where a race condition can leak a DMA buffer, enabling local information disclosure with SYSTEM privileges and no user interaction. A patch (ALPS07645185) exists; no exploitation details are provided in the connected documents. References show consistent d...

CVE-2023-20721

CVE-2023-20721 concerns the isp module in MediaTek chips, where an out-of-bounds write caused by improper input validation could enable local privilege escalation with SYSTEM privileges. Exploitation details are not provided in the documents; user interaction is not required. A patch/issue identi...

CVE-2023-20768

CVE-2023-20768 affects ion, with an out-of-bounds read caused by type confusion that can lead to local privilege escalation (System execution privileges required). Exploitation details are not provided in the available documents. A patch is identified (Patch ID ALPS07560720; Issue ALPS07559800).

CVE-2023-20787

MediaTek thermal module vulnerability CVE-2023-20787 is a use-after-free caused by a race condition in the thermal management code. It could allow local escalation to SYSTEM privileges without user interaction. Patch ALPS07648734 is noted; no exploitation details are provided in the sources. Refs...

CVE-2023-20825

In duraspeed, a missing permission check enables local information disclosure without extra execution privileges or user interaction. Affected component/feature is unspecified in the provided details, and the vulnerability is linked to patch ALPS07951402 (Issue ALPS07951413). Exploitation is desc...

CVE-2023-21332

CVE-2023-21332 concerns Android’s Text Services, where a side-channel could reveal whether an app is installed without query permissions. This enables local information disclosure with no extra execution privileges and no user interaction required. The issue is categorized as affecting the Text S...

CVE-2023-21339

CVE-2023-21339: Affects Minikin in Android. The vulnerability enables triggering an ANR through a malicious message, caused by resource exhaustion, leading to remote Denial of Service with no additional privileges and no user interaction required. Public details specify the issue but do not provi...

CVE-2023-21340

The CVE-2023-21340 entry describes an information-disclosure vulnerability in the Telecomm component of Android, caused by a missing permission check that allows local access to the call state without extra privileges or user interaction. Exploitation is local and does not require user action; CV...

CVE-2023-21344

CVE-2023-21344 affects Android’s Job Scheduler. The issue enables a local attacker to determine whether an app is installed via a side-channel information disclosure, without query permissions and with no user interaction. Impact is local information disclosure; exploitation requires local access...

CVE-2023-32849

In the provided documents, CVE-2023-32849 is tied to the cmdq module, where a type confusion causes an out-of-bounds write. This leads to local privilege escalation with System execution privileges required, and exploitation does not require user interaction. A patch/reference is listed as Patch ...

CVE-2023-32855

CVE-2023-32855 describes a privilege-escalation defect in the aee module (MediaTek context) caused by a missing permission check, enabling local escalation to System privileges without user interaction. Exploitation status is not detailed in the provided documents. A fix is referenced as Patch ID...

CVE-2023-32858

The CVE-2023-32858 entry concerns the GZ module (MediaTek context) with a missing data erasing causing local information disclosure. Root cause is not clearly detailed beyond the data erasure gap; the impact states local information disclosure with System execution privileges required, and exploi...

CVE-2023-33908

CVE-2023-33908 concerns a missing permission check in the ims service, associated with UNISOC chipsets. The vulnerability enables local information disclosure without requiring additional execution privileges. Reported by multiple sources (NVD/Red Hat/CVE entries) consistently describe the impact...

CVE-2023-40653

CVE-2023-40653 concerns the FW-PackageManager with a missing permission check that could enable local escalation of privileges to SYSTEM. Multiple connected sources corroborate the description across vendors and databases (NVD, Red Hat, CVE/CVE List, CNNVD, PT-2023-27575). The core impact is loca...

CVE-2023-42634

CVE-2023-42634 concerns a vulnerability in the validationtools component. The issue is a missing permission check that can allow local information disclosure without requiring additional execution privileges. Documents consistently describe it as a local information disclosure risk without specif...

CVE-2023-42650

CVE-2023-42650 concerns UNISOC chipsets’ engineermode. The vulnerability is due to a missing permission check in engineermode, which could allow local information disclosure without requiring additional execution privileges. The NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL att...

CVE-2024-20119

The CVE-2024-20119 issue is in MediaTek’s mms component and stems from an incorrect bounds check causing an out-of-bounds write. This can lead to local escalation of privilege with SYSTEM execution privileges required; no user interaction is needed. Patch ID ALPS09062301; Issue ID MSV-1620 is ref...

CVE-2024-56191

The CVE-2024-56191 issue affects Google Pixel Watch, rooted in an integer overflow in dhd_process_full_gscan_result (dhd_pno.c). The vulnerability allows local elevation of privilege without additional execution privileges and does not require user interaction. Affected component/file: dhd_pno.c ...

CVE-2024-56192

CVE-2024-56192 affects Google Pixel Watch: a missing bounds check in wl_notify_gscan_event (wl_cfgscan.c) enables an out-of-bounds write that could allow local privilege escalation without user interaction. Exploitation status is not provided in the supplied documents; remediation is to apply pat...

CVE-2025-48544

CVE-2025-48544 affects Google Android via a vulnerability in the MediaProvider component that allows reading files belonging to other apps due to SQL injection in multiple locations. The underlying issue enables local elevation of privilege with no additional execution privileges and without user...

CVE-2025-48602

CVE-2025-48602 describes a logic error in Android’s KeyguardViewMediator.java (exitKeyguardAndFinishSurfaceBehindRemoteAnimation) that can cause a lockscreen bypass, enabling local escalation of privilege without additional execution privileges or user interaction. Affected software is the Androi...

CVE-2014-9778

CVE-2014-9778 describes an elevation-of-privilege vulnerability in the Qualcomm MSM video driver (vid_dec_set_h264_mv_buffers) on Android devices running Nexus 5 and 7 (2013) prior to 2016-07-05. The root cause is failure to validate the number of buffers in vid_dec_set_h264_mv_buffers within dri...

CVE-2014-9894

CVE-2014-9894 affects drivers/misc/qseecom.c in the Qualcomm component used in Android on Nexus 7 (2013) devices. The root cause is that certain name strings may not end with a null terminator ('\0'), enabling a crafted application to obtain sensitive information. The vulnerability is described f...

CVE-2014-9896

Technical details (affected product/component, root cause, impact, fix) are not publicly provided in the connected documents. Please monitor for updates from official advisories to obtain confirmed remediation guidance.