CVE-2020-0321

CVE-2020-0321 affects Android 11, involving the MP3 extractor in the Media Framework where an out-of-bounds write due to uninitialized data can lead to remote code execution. Exploitation requires user interaction and is conveyed as a high-severity issue (Android 11 Security Release Notes; CVSS d...

CVE-2020-0322

CVE-2020-0322 affects Android 11, specifically the apexd component. The vulnerability is an out-of-bounds read caused by a missing bounds check in apexd, which could lead to local information disclosure and, with system privileges, potential execution. Exploitation requires no user interaction an...

CVE-2020-0336

CVE-2020-0336 pertains to Android 11 SurfaceFlinger where memory corruption arises from a type confusion issue. The vulnerability enables local escalation of privilege with system-level execution privileges required, and exploitation does not require user interaction. Affected component: SurfaceF...

CVE-2020-0344

CVE-2020-0344 affects Android 11’s MediaProvider, where a SQL injection leads to local information disclosure without user interaction. The issue is documented across multiple sources (NVD, Red Hat, PRION, NCSC) and is listed under Android 11 vulnerability details. remediation is via Android 11 s...

CVE-2020-0495

CVE-2020-0495 is an Android 11 vulnerability affecting the JBig2_SddProc.cpp decode_Huffman path, where an integer overflow can trigger an out-of-bounds write and potential information disclosure. Exploitation is described as local (no user interaction required) with no privileges escalation impl...

CVE-2020-10845

CVE-2020-10845 describes a race condition that leads to a use-after-free in the MTP stack on Samsung mobile devices running O(8.x), P(9.0), and Q(10.0) software. The Samsung internal identifier is SVE-2019-16520 (February 2020). The available documents do not provide concrete details on vulnerabl...

CVE-2020-11604

CVE-2020-11604 affects Samsung mobile devices running P (9.0) and Q (10.0) with TEEGRIS; the issue is an out-of-bounds read in the MLDAP Trustlet. Connected records confirm the vulnerability details and Samsung’s reference ID SVE-2019-16565. Impact details across sources indicate leakage of infor...

CVE-2020-15583

This CVE pertains to Samsung mobile devices running O(8.x), P(9.0), and Q(10.0) where the StickerProvider allows directory traversal to access system files. Root cause: improper validation in the StickerProvider component enables path traversal that could lead to exposure of sensitive files. The ...

CVE-2020-25048

CVE-2020-25048 affects Samsung mobile devices running Q(10.0) with ONEUI 2.1. In the lockscreen state, the Quick Share feature can perform unauthenticated downloads, enabling file injection. This is tied to Samsung ID SVE-2020-17760 (Aug 2020). The NVD entry provides CVSS metrics (2.1/2.0) and a ...

CVE-2020-25050

CVE-2020-25050 affects Samsung mobile devices running P(9.0) and Q(10.0). The issue is in the CMC service, which can allow attackers to obtain sensitive information. Affected component is the CMC service on Samsung Android builds; root cause details are not fully disclosed in the provided documen...

CVE-2020-25062

CVE-2020-25062 describes a privilege-bypass in LGTelephonyProvider on LG Android devices (9/10). Affected product: LG mobile devices running Android 9–10; root cause: bypass of intended privilege restrictions in LGTelephonyProvider (LG internal ID LVE-SMP-200017). Impact is reported as high to cr...

CVE-2020-25063

CVE-2020-25063 affects LG mobile devices running Android OS 7.2, 8.0, 8.1, 9, and 10. The issue stems from incorrect application-level input validation in an LG component, causing an application crash (LG ID LVE-SMP-200018, July 2020). Documents do not provide additional technical details such as...

CVE-2020-25282

Technical details about CVE-2020-25282 are not publicly available in the provided connected documents. No specifics on affected products, components, root cause, impact, or fixes are present. Monitor for updates from the cited sources.

CVE-2020-27045

CVE-2020-27045 is reported in Android as a heap overflow in CE_SendRawFrame within ce_main.cc, causing an out-of-bounds write. The issue is described as a local elevation of privilege vulnerability requiring user interaction for exploitation. Affected product line is Android 11. In the available ...

CVE-2021-0347

The CVE-2021-0347 entry concerns the Android subsystem component “ccu,” where a missing bounds check enables an out-of-bounds read. This could permit local information disclosure with System privileges required, and would require user interaction to exploit. Affected products/versions explicitly ...

CVE-2021-0416

CVE-2021-0416 concerns the Mediatek memory management driver. The available descriptions state a vulnerability due to improper input validation that can cause a system crash, yielding local denial of service without requiring user interaction. Affected components are described as the memory manag...

CVE-2021-0449

CVE-2021-0449 : In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data, leading to local information disclosure with System execution privileges required. The vulnerability affects the Titan M component as listed in Android kernel contexts; exploita...

CVE-2021-0456

CVE-2021-0456 : In the Citadel chip firmware, there is a possible out-of-bounds write due to a missing bounds check, enabling local escalation of privilege with System execution privileges required. Affected: Citadel chipset firmware in Android kernels (Android ID A-174769927). Impact per sources...

CVE-2021-0464

CVE-2021-0464 affects the Android kernel component sound_trigger_event_alloc in platform.h, with a heap buffer overflow causing an out-of-bounds write that could lead to local privilege escalation without user interaction. The linked Red Hat/NVD entries confirm the issue and classify it as Elevat...

CVE-2021-0489

CVE-2021-0489: In Android’s memory management driver, a missing bounds check enables an out-of-bounds write. This could allow local escalation of privilege without user interaction. Affected products/versions are tied to Android SoCs; the vulnerability is listed in the Android May 2021 security b...

CVE-2021-0495

CVE-2021-0495 : In Android, a memory management driver has an out-of-bounds write due to uninitialized data, enabling local elevation of privilege. Exploitation is Local with no user interaction required; no explicit exploit details or patch versions are provided in the connected documents.

CVE-2021-0498

The CVE-2021-0498 entry concerns Android’s memory management driver, where a double free can cause memory corruption leading to local escalation of privilege with no required user interaction. The issue is described consistently across multiple connected sources (including NVD, Red Hat, CNVD, PRI...

CVE-2021-0528

CVE-2021-0528 describes a vulnerability in the Android memory management driver (MediaTek MTK chipset) where a double free leads to memory corruption, enabling local privilege escalation with no extra user interaction. The issue is categorized as a local privilege escalation (local access, no use...

CVE-2021-0611

CVE-2021-0611 affects the Mediatek m4u component, where a memory corruption due to a use-after-free condition can cause local escalation of privilege to SYSTEM, with no user interaction required. The entry notes a patch ID ALPS05403499 and an issue ID ALPS05425810 as fixes. Connected documents re...

CVE-2021-0613

CVE-2021-0613 affects MediaTek’s asf extractor component. It describes an out-of-bounds read caused by an incorrect bounds check, enabling local information disclosure without extra privileges or user interaction. A patch/issue reference is ALPS05489178 (MediaTek bulletin). Exploitation details (...

CVE-2021-0614

The CVE-2021-0614 entry concerns MediaTek’s asf extractor, where an out-of-bounds read results from an incorrect bounds check. This vulnerability may lead to local information disclosure without requiring user interaction or additional execution privileges. Affected reality is supported by source...

CVE-2021-0625

CVE-2021-0625 affects MediaTek’s ccu (camera control processor). The Red Hat/NVD entries describe memory corruption due to improper locking, enabling local escalation of privilege with System execution privileges required and no user interaction. The vulnerability impact is stated as local, with ...

CVE-2021-0628

CVE-2021-0628 affects OMA DRM. The issue is memory corruption caused by improper input validation, enabling local escalation of privilege with System execution privileges required; no user interaction needed. Patch ALPS05722454/ALPS05722454 is noted. Connected records consistently describe the sa...

CVE-2021-25427

CVE-2021-25427 describes a SQL injection vulnerability in Bluetooth prior to the Samsung SMR July-2021 Release 1, enabling unauthorized access to data on paired devices. The vulnerability is tied to the Bluetooth module's handling of SQL statements, with documented impact being access to paired d...

CVE-2021-25430

CVE-2021-25430 is an improper access control vulnerability in a Bluetooth application, allowing untrusted apps to access Bluetooth information. Root cause: access-control failure in the Bluetooth component. Impact: confidentiality exposure at a LOW level (C:L) per CVSS3.1 (AV:A, AC:L, PR:N, UI:N,...

CVE-2021-25452

CVE-2021-25452 is a vulnerability in the Samsung DSP driver related to improper input validation when loading graph files, prior to SMR Sep-2021 Release 1. The issue allows a local attacker to trigger a permanent denial-of-service condition on the device by exploiting the faulty graph-file loadin...

CVE-2021-25453

CVE-2021-25453 affects Samsung devices due to improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1. The vulnerability allows untrusted applications to obtain Bluetooth information. Connected sources indicate the issue originates from Bluetooth API access controls, with mitiga...

CVE-2021-25457

The CVE-2021-25457 report concerns a vulnerability in Samsung’s DSP driver prior to the SMR September 2021 Release 1. The issue is an improper input validation that allows a local attacker to obtain a limited amount of kernel memory information, affecting kernel memory confidentiality. Affected c...

CVE-2021-25474

Summary (CVE-2021-25474): Samsung SystemUI prior to SMR Oct-2021 Release 1 contains an improper exception handling for the multi_sim_bar_show_on_qspanel value, enabling a user‑device denial of service once a shell privilege is gained. The issue is triggered in SystemUI and results in a permanent ...

CVE-2021-25512

CVE-2021-25512 affects the Samsung telephony stack. Connected documents indicate an improper validation vulnerability in telephony prior to Samsung SMR Dec-2021 Release 1, allowing attackers to launch certain activities. Affected: telephony component on Samsung devices (prior to SMR Dec-2021 Rele...

CVE-2022-30714

CVE-2022-30714 affects Samsung Mobile’s SemIWCMonitor prior to SMR Jun-2022 Release 1. The vulnerability is an information-disclosure flaw that allows local attackers to obtain MAC address information. No exploit details are provided in the available documents. The issue has been associated with ...

CVE-2022-39089

CVE-2022-39089 affects the mlog service, where a missing bounds check allows an out-of-bounds read. This can lead to local denial of service with SYSTEM privileges required. The public documents consistently describe the issue in the mlog service and the resulting impact, but do not provide concr...

CVE-2022-39115

CVE-2022-39115 relates to a missing permission check in the Music service, allowing a local attacker to cause a denial of service without extra privileges. Affected component is the Music service; root cause is insufficient authorization before performing sensitive actions. Impact stated as local...

CVE-2022-39119

CVE-2022-39119 describes a missing permission check in a network service that could allow local escalation of privilege without extra execution privileges. Multiple connected sources reference Unisoc chipsets/networks as the affected context, noting the issue stems from inadequate privilege valid...

CVE-2022-42764

The CVE-2022-42764 entry concerns a missing bounds check in the wlan driver, causing a local denial of service in wlan services. Connected sources corroborate the issue as affecting the UNISOC WLAN driver/ chipset with similar wording. The available documents specify the vulnerability but do not ...

CVE-2022-42766

The CVE-2022-42766 entry concerns the wlan driver where a missing permission check could allow local information disclosure. Connected sources consistently describe this as a local-privilege issue affecting the wlan driver, with impact on confidentiality (high) and limited attack complexity (low)...

CVE-2022-47485

CVE-2022-47485 involves a possibly out-of-bounds write in the modem control device due to a missing bounds check. Public details consistently reference local denial of service with system execution privileges required. Affected component is the modem control device in UNISOC chipsets; exact affec...

CVE-2022-47494

CVE-2022-47494 affects UNISOC chipsets’ soter service module. The root cause is a missing bounds check causing an out-of-bounds write, with impact described as local denial of service and potential for system-level execution privileges. Connected sources consistently reference this description ac...

CVE-2022-47495

CVE-2022-47495 affects the soter service on UNISOC chipsets, caused by a missing bounds check leading to an out-of-bounds write. The documented impact is local denial of service with system execution privileges required. CVSS metrics indicate LOCAL attack vector, LOW complexity, HIGH privileges r...

CVE-2022-48248

The CVE-2022-48248 issue concerns UNISOC chipsets’ audio service, where a missing permission check could allow local privilege escalation with no extra privileges. Affected component is the audio service in the chipset’s software stack; root cause stated as insufficient authorization checks. The ...

CVE-2022-48375

CVE-2022-48375 concerns the UNISOC chipsets’ contacts service module, where a missing permission check may allow a local attacker to cause a denial of service with no additional privileges. The available documents consistently describe the issue as a local impact vulnerability due to insufficient...

CVE-2022-48383

CVE-2022-48383 affects the srtd service in UNISOC chipsets. The issue is a missing permission check that can lead to local privilege escalation with no extra privileges required. CVSSv3.1 score 7.8 (HIGH). Exploitation details are not provided in the documents; no remediation/version patch is cit...

CVE-2023-20624

CVE-2023-20624 describes a potential out-of-bounds write in the vow module due to an incorrect bounds check, which could enable local escalation of privilege with System execution privileges needed. User interaction is not required for exploitation. The issue affects MediaTek vow-related componen...

CVE-2023-20626

CVE-2023-20626 affects MediaTek’s msdc module. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local escalation of privileges with System execution privileges required and no user interaction needed. Several connected records corroborate the vulnerability in msdc...

CVE-2023-20635

The CVE-2023-20635 issue concerns the keyinstall module (noted across multiple sources) where an integer overflow can lead to information disclosure. Reported impact is local information disclosure with system-level execution privileges required, and exploitation does not require user interaction...