CVE-2018-9592

CVE-2018-9592: In mca_ccb_hdl_rsp() of mca_cact.cc on Android 7.0–9.0, an out-of-bounds read due to a missing bounds check could allow remote information disclosure with no privileges and no user interaction required. The vulnerability affects Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9 as cited i...

CVE-2019-2037

CVE-2019-2037 affects Android: the issue resides in l2cu_send_peer_config_rej in l2c_utils.cc, where an incorrect bounds check allows an out-of-bounds read, enabling remote information disclosure without extra privileges and without user interaction. Affected versions include Android 7.0, 7.1.1, ...

CVE-2019-2038

CVE-2019-2038 corresponds to an Android vulnerability in rw_i93_process_sys_info (rw_i93.cc) where a missing bounds check allows an out-of-bounds read. The impact is local information disclosure without extra execution privileges, with exploitation requiring user interaction. Affected Android ver...

CVE-2019-20554

Technical details about CVE-2019-20554 are not publicly provided in the supplied documents. The collection notes FRP bypass on Samsung devices via an external keyboard, but no vendor/product/version specifics or remediation are given. Monitor for updates.

CVE-2019-20556

The CVE-2019-20556 entry concerns Samsung mobile devices with Android 9.0 (P) on specific chipsets (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, exynos9820). The issue is a memory corruption in the RKP (root key protection) path that permits an attacker to control the effective address ...

CVE-2019-20577

CVE-2019-20577 affects Samsung mobile devices running P(9.0) on Exynos chipsets, where the Mali GPU driver can cause a kernel panic. The issue is documented across multiple sources (NVD, Red Hat RH:CVE-2019-20577, CVE records) with Samsung’s internal reference SVE-2019-14372 (August 2019). Public...

CVE-2019-20600

CVE-2019-20600 affects Samsung mobile devices running O(8.0) and P(9.0) on Exynos8890 systems. The issue is a use-after-free in the MALI GPU driver. Affected component: Mali GPU driver in affected Samsung devices; root cause: use-after-free vulnerability. The provided documents do not specify the...

CVE-2019-20609

CVE-2019-20609 affects Samsung mobile devices running P(9.0). An attacker with access to a paired smartwatch can view Secure Folder notification content, exposing confidential information. The root cause is not detailed in the provided documents; no vendor patch/version or remediation details are...

CVE-2019-20623

CVE-2019-20623 affects Samsung mobile devices running Android N (7.1), O (8.x), and P (9.0). The vulnerability is described as an uninitialized memory disclosure in Gallery, associated with Samsung ID SVE-2018-13060 (Feb 2019). Connected sources corroborate the issue across Red Hat and other CVE ...

CVE-2019-20775

CVE-2019-20775 relates to LG mobile devices running Android 9.0 on Qualcomm chipsets (SDM450/SDM845/SM6150/SM8150). The issue is described as weak encryption that enables local information disclosure. The root cause and impact are stated in all connected sources, with no details on affected appli...

CVE-2019-20782

CVE-2019-20782 describes a buffer overflow in LG Advanced Flash (LAF) on LG mobile devices running Android 7.x–8.1. The issue is tied to LG’s LAF component and 나타는 root cause is a buffer overflow. Documents specify affected versions and device scope but do not provide exploit details, affected pr...

CVE-2019-2172

CVE-2019-2172 is a information-disclosure flaw in the Android 10 libxaac component caused by uninitialized data. The vulnerability could allow access to information without extra execution privileges, with the attack requiring user interaction. Affected product: Android 10 (libxaac in Android). T...

CVE-2019-2199

CVE-2019-2199 affects Android 10, where in PackageInstallerService.java’s createSessionInternal a permissions bypass could enable local elevation of privilege to System level. No exploitation details are provided beyond that; impact is local and requires no user interaction. The Android Security ...

CVE-2019-9319

CVE-2019-9319 affects Android 10 media stack (libavc) where a missing variable initialization in the library can lead to remote information disclosure without extra execution privileges. Exploitation requires user interaction. The Android 10 security release notes state these issues are addressed...

CVE-2019-9328

CVE-2019-9328 affects the Android 10 Bluetooth stack, with an out-of-bounds read caused by a missing bounds check. This can lead to remote information disclosure without privileges and without user interaction. The entries consistently describe the issue as part of Android 10 and reference the An...

CVE-2019-9331

CVE-2019-9331 affects Android 10 Bluetooth: a missing bounds check enables an out-of-bounds read and remote information disclosure without privileges or user interaction. Documented in Android 10 security release notes; mitigated by Android patch level 2019-09-01 or later. Exploitation status and...

CVE-2019-9332

The CVE-2019-9332 entry concerns the Android 10 Bluetooth stack, where a missing bounds check enables an out-of-bounds read. This could allow remote information disclosure without user interaction or privileges, over a network vector (low complexity). The issue is documented in NVD and Red Hat’s ...

CVE-2019-9382

CVE-2019-9382 affects Android 10 via the libeffects component, where a missing bounds check allows an out-of-bounds write. This could enable remote code execution with the attacker leveraging a vulnerable path in the media stack. Exploitation details in the source documents indicate the issue may...

CVE-2019-9414

CVE-2019-9414 affects wpa_supplicant on Android 10. The root cause is improper input validation of the basicConstraints field in intermediary certificates, enabling a remote information disclosure via a man‑in‑the‑middle scenario with no user interaction. Impact is partial confidentiality loss; n...

CVE-2019-9434

CVE-2019-9434 is a Bluetooth information-disclosure vulnerability in Android 10. It involves an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure with partial confidentiality impact and heap data potentially written to logs. Exploitation reportedly requir...

CVE-2019-9470

CVE-2019-9470 is an Android kernel vulnerability affecting the dma_sblk_start path in abc-pcie.c. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with system execution privileges required; no user interaction is needed. Publicly documen...

CVE-2020-0133

CVE-2020-0133 affects Android 10. The issue arises in MockLocationAppPreferenceController.java where a permissions bypass allows spoofing GPS location, enabling local privilege escalation. Exploitation details are not publicly provided in the connected documents; the NVD entry lists local attack ...

CVE-2020-0135

CVE-2020-0135 affects Android 10, where in RollbackManagerServiceImpl.java a missing permission check can cause backup metadata exposure, enabling local information disclosure with System privileges (no user interaction required). The issue is documented across multiple sources (NVD/Red Hat/PRION...

CVE-2020-0136

CVE-2020-0136 affects Android 10, with an out-of-bounds write in Parcel.cpp caused by an integer overflow, enabling local privilege escalation in the system server without extra execution privileges or user interaction. Documents consistently describe the issue as a local elevation of privilege v...

CVE-2020-0143

CVE-2020-0143 affects Android 10 with a flaw in the NFC stack: in nfa_dm_ndef_find_next_handler (nfa_dm_ndef.c) there is a missing bounds check that allows an out-of-bounds read. This can lead to local information disclosure of heap data when the device firmware is compromised and System executio...

CVE-2020-0146

CVE-2020-0146 affects Android 10 in the btu_hcif hardware path (btu_hcif.cc). The issue is a missing bounds check that enables an out-of-bounds read, potentially allowing local information disclosure with system privileges. No user interaction is required. The Red Hat and NVD entries corroborate ...

CVE-2020-0155

CVE-2020-0155 affects Android 10, specifically in the NFC HAL code path: phNxpNciHal_send_ese_hal_cmd in phNxpNciHal_ext.cc. The root cause is a missing bounds check that enables an out-of-bounds write. Impact per the description is local elevation of privilege with user privileges required; expl...

CVE-2020-0160

Concretely affected: Android 10 devices vulnerable through the Media/SampleTable path in SampleTable.cpp (setSyncSampleParams). The root cause is a missing bounds check that can trigger resource exhaustion, leading to remote denial of service. Exploitation requires user interaction, and the impac...

CVE-2020-0166

CVE-2020-0166 affects Android 10, where in multiple functions of URI.java a missing validation during parceling of URI information can lead to local privilege escalation. The Android Security Bulletin (Pixel Update Bulletin) lists CVE-2020-0166 under the Android runtime with Updated AOSP version ...

CVE-2020-0180

CVE-2020-0180 affects Android 10 (Media Framework). Vulnerability arises from a missing bounds check in GetOpusHeaderBuffers() within OpusHeader.cpp, causing an out-of-bounds read that can disclose information remotely. Exploitation requires user interaction. Public references in the Pixel Update...

CVE-2020-0193

CVE-2020-0193 is a vulnerability in Android 10 affecting the video codec path ihevc_intra_pred_chroma_mode_3_to_9_av8, described as an out-of-bounds read due to a heap buffer overflow. The issue could lead to remote information disclosure without additional execution privileges; exploitation requ...

CVE-2020-0277

Summary (CVE-2020-0277) : The vulnerability affects Android 11 in the NetworkPolicyManagerService . It arises from a missing permission check , allowing a local attacker to perform a permissions bypass and achieve local elevation of privilege to modify the device’s data plan without any extra exe...

CVE-2020-0345

CVE-2020-0345 affects Android 11 DocumentsUI, enabling a local elevation of privilege via a permission bypass (confused deputy). Impact: partial/full escalation on affected builds; CVSS v3.1: LOCAL, LOW complexity, UI REQUIRED, with HIGH confidentiality, integrity, and availability impacts. Root ...

CVE-2020-0363

CVE-2020-0363 affects Android 11 libmedia and can cause resource exhaustion leading to remote DoS. Exploitation requires user interaction (per CVSS3.1); CVSS2 indicates network access with partial availability impact. Public documents identify the issue as improper input validation in libmedia. A...

CVE-2020-0428

CVE-2020-0428 describes a race-condition in CamX code that enables a use-after-free vulnerability, leading to local escalation of privilege to SYSTEM level with no user interaction. Affected software is Android kernel camera components (CamX). The NVD entry lists CVSS2 as 4.4 (LOCAL, MEDIUM) and ...

CVE-2020-0473

CVE-2020-0473 is an Android 11-related issue in Bluetooth: in updateIncomingFileConfirmNotification of BluetoothOppNotification.java, a permissions bypass could allow a local escalation of privilege. With physical possession of the device, an attacker could transfer files over Bluetooth without a...

CVE-2020-10829

CVE-2020-10829 affects Samsung mobile devices running Android O–Q on Broadcom-based hardware. The root cause is a kernel driver heap overflow, enabling arbitrary code execution. Samsung’s internal tracker is SVE-2019-15880 (March 2020). Documented in multiple feeds; in CMP context, no exploit det...

CVE-2020-10837

The CVE-2020-10837 vulnerability affects Samsung mobile devices running P(9.0) and Q(10.0) with TEEGRIS. The issue resides in the Esecomm Trustlet, enabling a stack overflow that can lead to arbitrary code execution. Affected software/component: Esecomm Trustlet within Samsung TEEGRIS on P9.0/Q10...

CVE-2020-10846

CVE-2020-10846 affects Samsung mobile devices with P(9.x) and Q(10.x) software. The issue enables OEM unlock on KG-enrolled devices, potentially allowing download of unwanted binaries. Samsung ID: SVE-2019-16554. No explicit remediation or exploitation details are provided in the connected docume...

CVE-2020-10853

CVE-2020-10853 affects Samsung mobile devices running P (Android 9.0). The issue is described as an information disclosure via the Gallery app that leaks cached data. Samsung IDs associated with the vulnerability are SVE-2019-16010, SVE-2019-16011, and SVE-2019-16012. Connected sources reiterate ...

CVE-2020-11606

The CVE-2020-11606 entry concerns Samsung mobile devices running Q (10.0). Affected component is information exposure within the Secure Folder’s application preview on a locked device, leading to partial confidentiality impact. The root cause and exact vulnerable code path are not detailed in the...

CVE-2020-12748

CVE-2020-12748 affects Samsung mobile devices running Q(10.0); attackers can bypass the locked-state protection to designate a different preferred SIM card. Root cause details are not provided in the documents. Remediation is indicated via Samsung security update SVE-2020-16594; apply the vendor-...

CVE-2020-15578

The CVE-2020-15578 entry concerns Samsung mobile devices running O(8.x) software where the FactoryCamera component does not properly restrict runtime permissions. Affected software is described as Samsung devices with that Android/OS lineage; the root cause is the improper permission restriction ...

CVE-2020-15580

Samsung mobile devices running O(8.x), P(9.0), and Q(10.0) are affected by CVE-2020-15580, allowing attackers to bypass Factory Reset Protection by enrolling a new lock password. Root cause details are not provided in the documents. Impact is FRP bypass; no exploit vectors or in-the-wild details ...

CVE-2020-15581

CVE-2020-15581 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue is in the kernel logging feature, which can allow attackers to discover virtual addresses via vectors involving shared memory. The reported impact is partial disclosure of data (confidentiality impact) wi...

CVE-2020-15582

Summary of CVE-2020-15582 : A BLE buffer overflow issue was reported on Samsung mobile devices running P (9.0) and Q (10.0) on Exynos 7885, leading to a deadlock or crash in the Bluetooth Low Energy component. The Samsung internal ID is SVE-2020-16870 (July 2020). Connected documents confirm the ...

CVE-2020-27036

CVE-2020-27036 is a local elevation-of-privilege issue in Android 11’s NFC stack. The vulnerability occurs in phNxpNciHal_send_ext_cmd implemented by phNxpNciHal_ext.cc, where a missing bounds check enables an out-of-bounds write. This could lead to local escalation of privilege on the NFC server...

CVE-2020-27046

CVE-2020-27046 affects Android 11 (per initial description). The issue is in nfc_ncif_proc_ee_action of nfc_ncif.cc, where a missing bounds check allows an out-of-bounds read that can lead to local information disclosure with system-level privileges. Exploitation requires no user interaction. NVD...

CVE-2021-0353

CVE-2021-0353 affects Android 11 via a heap buffer overflow in the kisd component, causing a memory corruption vulnerability. The root cause is heap-based memory corruption leading to local escalation of privilege, requiring system-level privileges for impact; exploitation is described as not req...

CVE-2021-0372

CVE-2021-0372 is a local elevation of privilege in Android 11 via getMediaOutputSliceAction in RemoteMediaSlice.java, caused by an unsafe PendingIntent that bypasses permissions without requiring user interaction. The impact is escalation to higher privileges (HIGH per CVSSv3.1) with local access...