CVE-2019-20561

CVE-2019-20561 refers to a vulnerability in Samsung mobile devices with N(7.x), O(8.x), and P(9.0) Exynos chipsets where the bootloader contains an integer signedness error (Samsung ID SVE-2019-15230). Public documents across NVD and Red Hat cite the same issue; no product-specific exploit detail...

CVE-2018-9451

CVE-2018-9451 affects Android, where DynamicRefTable::load in ResourceTypes.cpp has a missing bounds check causing an out-of-bounds read. This leads to local information disclosure without requiring user interaction. Vulnerable Android versions include 6.0–8.1; patch availability is tied to Andro...

CVE-2018-9476

CVE-2018-9476 affects Android 8.0–8.1 via the Bluetooth stack: avrc_pars_browsing_cmd in avrc_pars_tg.cc, where a use-after-free caused by improper locking can enable remote privilege escalation with no user interaction. Exploitation is described as remote, with no additional execution privileges...

CVE-2018-9483

CVE-2018-9483 concerns a vulnerability in Android’s Bluetooth stack, specifically in the function bta_dm_remove_sec_dev_entry within bta_dm_act.cc . The issue is a possible out-of-bounds read caused by a use-after-free, which could allow remote information disclosure over Bluetooth without extra ...

CVE-2018-9484

CVE-2018-9484 describes an out-of-bounds read in the Android Bluetooth L2CAP implementation: in l2cu_send_peer_config_rej within l2c_utils.cc, a missing bounds check can cause a remote information disclosure without requiring privileges or user interaction. The issue is labeled with a HIGH severi...

CVE-2018-9498

CVE-2018-9498 affects Android's media stack, specifically the Skia component’s SkSampler::Fill in SkSampler.cpp. The issue is a possible out-of-bounds write caused by an integer overflow, enabling remote code execution with user interaction required. Affected: Android 7.0–7.1.2 and 8.0–8.1 (Andro...

CVE-2018-9519

CVE-2018-9519 affects Android, specifically the Easel component (easelcomm_hw_build_scatterlist). The issue is a race-condition–driven out-of-bounds write in the kernel that can lead to local escalation of privileges with System privileges required; no user interaction is needed. The available do...

CVE-2018-9537

CVE-2018-9537 affects Google Android 9 (Android-9) and is caused by a missing bounds check in CAacDecoder_DecodeFrame within aacdecode.cpp, leading to a possible out-of-bounds write. The consequence is remote code execution in the media server with no additional execution privileges, requiring us...

CVE-2018-9538

CVE-2018-9538 affects Android (8.1, 9) and relates to V4L2SliceVideoDecodeAccelerator::Dequeue, where an incorrect bounds check enables a possible out-of-bounds read of a function pointer. This could allow local escalation of privilege with no user interaction. The vulnerability is associated wit...

CVE-2018-9541

CVE-2018-9541 affects Android devices (Android 7.0–9) and targets the Bluetooth stack. The flaw is in the function avrc_pars_vendor_rsp of avcr_pars_ct.cc , where a missing bounds check can cause an out-of-bounds read. This can lead to remote information disclosure in the Bluetooth service withou...

CVE-2018-9543

CVE-2018-9543 affects Android and is described as an information disclosure due to a data wipe issue in trim_device within f2fs_format_utils.c, where the data partition may not be wiped during a factory reset. This could enable local disclosure of information after a factory reset without extra p...

CVE-2018-9548

CVE-2018-9548 affects Android: multiple ContentProvider.java functions allow a permission bypass due to missing URI validation, enabling local information disclosure without user interaction. Vulnerable in Android 7.0–7.1.2, 8.0–8.1, and 9.0. Mitigation is to apply patches from the 2018-12-01/12-...

CVE-2018-9554

The CVE-2018-9554 issue affects Android's IMediaExtractor.cp, specifically in the dumpExtractors path, where a permissions bypass could allow disclosure of recently accessed media files. The underlying impact is local information disclosure without execution privileges, with no user interaction r...

CVE-2018-9594

Summary: CVE-2018-9594 affects Android 7.x–9.x (7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9) in the llcp_link_proc_agf_pdu path of llcp_link.cc. Described as an out-of-bounds read caused by an integer overflow, enabling local information disclosure over NFC without user interaction. Impact (per sources): Loca...

CVE-2019-11341

On Samsung P(9.0) devices, the vulnerability enables a physically proximate attacker to start a TCP dump via the Service Mode feature (accessible after entering the *#9900# check code) without user knowledge. The OTP that protects this feature is generated locally, and the password creation logic...

CVE-2019-1996

CVE-2019-1996 affects Android Bluetooth processing. In avrc_pars_browse_rsp (avrc_pars_ct.cc), a missing bounds check can cause an out-of-bounds read, enabling remote information disclosure over Bluetooth with no extra privileges and no user interaction. Affects Android 8.0, 8.1, and 9. The issue...

CVE-2019-2039

In CVE-2019-2039, the flaw is a possible out-of-bounds read in rw_i93_sm_detect_ndef within rw_i93.cc, caused by a missing bounds check. This can lead to local information disclosure on Android devices. Affected products/versions include Android 7.0, 7.1.x, 8.x, and 9 (as listed in the NVD entry)...

CVE-2019-20540

CVE-2019-20540 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) Exynos software. The issue is a buffer over-read in the core touch screen driver that can lead to a possible information leak. Connected sources corroborate the same description; no explicit patch/version details or ...

CVE-2019-20543

CVE-2019-20543 involves Samsung mobile devices running Android 9.0 (P) where Factory Reset Protection can be bypassed via SamsungPay mini. The entry is corroborated across multiple sources (NVD, Red Hat, CNVD, CVE List) with the Samsung ID SVE-2019-15090. The connected documents confirm the issue...

CVE-2019-20553

CVE-2019-20553 affects Samsung mobile devices running P9.0 on chipsets SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820. The issue allows arbitrary memory read and write operations in the RKP component, as described in multiple sources (Samsung ID SVE-2019-15143). Public refe...

CVE-2019-20558

CVE-2019-20558 concerns a Buffer Overflow in the Touch Screen Driver on Samsung mobile devices with N(7.x), O(8.x) and P(9.0) Exynos chipsets (Samsung ID SVE-2019-14990). Affected component: Touch Screen Driver. Root cause: buffer overflow. Impact per sources: CVSS3.1 base score 9.8 (CRITICAL) wi...

CVE-2019-20568

CVE-2019-20568 describes a race condition leading to a Use-After-Free on Samsung mobile devices running O(8.x) and P(9.0) (Exynos and Qualcomm chipsets). The Samsung internal ID is SVE-2019-15067. Connected sources reaffirm the issue but do not provide concrete exploit details, affected component...

CVE-2019-20577

CVE-2019-20577 affects Samsung mobile devices running P(9.0) on Exynos chipsets, where the Mali GPU driver can cause a kernel panic. The issue is documented across multiple sources (NVD, Red Hat RH:CVE-2019-20577, CVE records) with Samsung’s internal reference SVE-2019-14372 (August 2019). Public...

CVE-2019-20582

CVE-2019-20582 concerns a use-after-free in the ion driver on Samsung mobile devices with Exynos9810 (O(8.x) and P(9.0)). The NVD entry lists a CVSS-3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required, and high impacts to confidentiality, integrity, and availabilit...

CVE-2019-20594

Affected software/hardware: Samsung mobile devices with O(8.1) and P(9.0) on Exynos chipsets. Vulnerability: a heap overflow in the bootloader. Root cause: heap overflow in bootloader code (unspecified module) leading to potential impact on device integrity. Impact: Partial to high in CVSS terms ...

CVE-2019-20596

Samsung mobile devices running N(7.x) and O(8.x) software (Exynos chipsets) are affected by CVE-2019-20596 due to an information disclosure in the GateKeeper Trustlet. The data shows a vulnerability in a Trustlet component, leading to partial confidentiality impact with high severity in CVSS 3.1 ...

CVE-2019-20601

CVE-2019-20601 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) with Exynos 7570/7580/7870/7880/8890, where RKP memory corruption results in an arbitrary write to protected memory. The issue, tracked under Samsung ID SVE-2019-13921-2 (May 2019), is documented across multiple sour...

CVE-2019-20603

Summary: CVE-2019-20603 concerns a NULL pointer dereference in the ESECOMM Trustlet on Samsung mobile devices running N(7.x), O(8.0), and P(9.0) on Qualcomm chipsets. The issue originates in the Trustlet and is documented with Samsung ID SVE-2019-13950. The CVSS metrics indicate a network-exposed...

CVE-2019-20604

The connected records indicate CVE-2019-20604 affects Samsung mobile devices running O(8.x) software, with the Gallery application being permanently disableable by an attacker. The core information available: affected product (Samsung Gallery on Samsung devices), impact (Gallery can be disabled p...

CVE-2019-20608

The CVE-2019-20608 entry concerns Samsung mobile devices running N(7.x), O(8.x), and P(9.0). The vulnerability is described as an issue where an attacker can use Emergency mode to disable features on these devices (Samsung IDs SVE-2018-13164, SVE-2018-13165). Connected sources (Red Hat, NVD, CVE ...

CVE-2019-20625

Summary: CVE-2019-20625 affects Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets). The issue is due to the ion debugfs driver, which can disclose information. The Samsung internal identifier is SVE-2018-13427 (Feb 2019). What’s affected / root cause: An information disclosure flaw i...

CVE-2019-2138

CVE-2019-2138 concerns libxaac on Android 10, where a missing bounds check can cause an out-of-bounds read leading to information disclosure. The vulnerability affects Android 10 and manifests as an information disclosure flaw that requires user interaction to exploit. Root cause is an out-of-bou...

CVE-2019-2190

CVE-2019-2190 affects LG's LAF component in the Android kernel, where a missing bounds check in a protected disk partition can cause local information disclosure via USB. Exploitation requires user privileges but not user interaction. The vulnerability is documented across multiple sources (NVD, ...

CVE-2019-2191

CVE-2019-2191 affects LG’s LAF component, exposing information from a protected disk partition due to a missing bounds check. This permits local information disclosure via USB with no user interaction; exploitation requires user privileges and is possible without user action. The related Red Hat/...

CVE-2019-9296

CVE-2019-9296 affects Android 10 and is described as an NFC-related out-of-bounds read that can disclose information locally without execution privileges. The root cause is a missing bounds check in NFC handling, with exploitation requiring user interaction. Impact is information disclosure (conf...

CVE-2019-9301

CVE-2019-9301 affects Android 10’s Media Framework (libAACdec). Description: an out-of-bounds write caused by an integer overflow could enable remote code execution with HIGH impact; exploitation requires user interaction. This entry is linked to Android 10 media framework issues and is cataloged...

CVE-2019-9309

CVE-2019-9309 affects Android 10 due to an out-of-bounds write in the NFC handling caused by a missing bounds check. This could enable local elevation of privilege with user interaction required for exploitation. The vulnerability is documented in the Android 10 security release notes and is addr...

CVE-2019-9377

CVE-2019-9377 affects Android 10: FingerprintService bypasses protections isolating user profiles due to a missing permission check, enabling local information disclosure of biometrics metadata for another user without additional execution privileges. Impact is limited to local information disclo...

CVE-2019-9403

CVE-2019-9403: In cn-cbor, an out-of-bounds read due to improper casting could lead to remote information disclosure on Android 10. Impact is information disclosure with no privileges gained; exploitation requires user interaction. CVSS2 base 4.3 (PARTIAL confidentiality impact) and CVSS3.1 base ...

CVE-2019-9407

CVE-2019-9407 affects the Android 10 Framework (notification management) and enables a local elevation of privilege by bypassing notification permissions, allowing a user-impacting privilege gain without user interaction. The issue is categorized as EoP with high impact (confidentiality, integrit...

CVE-2019-9467

CVE-2019-9467 affects Google's Android Bootloader (Bootloader/Android kernel component). The issue is a kernel command injection caused by missing command sanitization in the Bootloader, which can enable local privilege escalation to SYSTEM. Exploitation requires local access with high privileges...

CVE-2020-0086

CVE-2020-0086 affects Android 10. In Parcel.cpp, readCString may perform an out-of-bounds write due to an integer overflow, potentially enabling arbitrary code execution if IntSan is not enabled (it is by default). The vulnerability requires no user interaction and can be exploited remotely over ...

CVE-2020-0092

CVE-2020-0092 affects Android 10 and is described as a local information-disclosure vulnerability in the NotificationStackScrollLayout (setHideSensitive). The root cause is a permissions bypass that could disclose sensitive notification content; exploitation requires user interaction. Impact is p...

CVE-2020-0138

CVE-2020-0138 affects Android 10 with the flaw in get_element_attr_rsp of btif_rc.cc, where a missing bounds check allows an out-of-bounds write. This could enable remote code execution without additional privileges and without user interaction, typically via Bluetooth usage (though Bluetooth is ...

CVE-2020-0140

CVE-2020-0140 relates to Android 10 and is described in multiple sources as an information-disclosure vulnerability due to a missing bounds check in rw_i93_sm_detect_ndef of rw_i93.c. The underlying issue can enable remote information disclosure without extra execution privileges and without user...

CVE-2020-0151

CVE-2020-0151 affects Android 10 and is triggered in the avb_vbmeta_image_verify function of avb_vbmeta_image.c. The flaw is an out-of-bounds read due to a missing bounds check, leading to possible local information disclosure with system privileges (no user interaction required). Public details ...

CVE-2020-0152

CVE-2020-0152 affects Android 10 and is tied to the function avb_vbmeta_image_verify in avb_vbmeta_image.c . The root cause is a missing bounds check that enables an out-of-bounds read, leading to possible information disclosure with system-level privileges; exploitation does not require user int...

CVE-2020-0232

CVE-2020-0232 is reported in the Android kernel (Airbrush component). The issue arises when abc_pcie_issue_dma_xfer_sync creates a transfer object, stores it in a session, and a concurrent thread can fetch that object and delete it via abc_pcie_dma_user_xfer_clean. If this occurs, the original th...

CVE-2020-0262

CVE-2020-0262 affects Android 11 and stems from an unsafe PendingIntent used in WiFi tethering, enabling local elevation of privilege with user execution privileges needed and no user interaction required. The issue is categorized as EoP, with impact on confidentiality/ integrity/ availability as...

CVE-2020-0266

CVE-2020-0266 affects Android 11 via a factory reset protection (FRP) issue where a missing permission check enables a local elevation of privilege. Exploitation is described as requiring local access with no user interaction; no detailed exploit vectors are provided in the excerpts. The impact i...