CVE-2020-15582

Summary of CVE-2020-15582 : A BLE buffer overflow issue was reported on Samsung mobile devices running P (9.0) and Q (10.0) on Exynos 7885, leading to a deadlock or crash in the Bluetooth Low Energy component. The Samsung internal ID is SVE-2020-16870 (July 2020). Connected documents confirm the ...

CVE-2020-27036

CVE-2020-27036 is a local elevation-of-privilege issue in Android 11’s NFC stack. The vulnerability occurs in phNxpNciHal_send_ext_cmd implemented by phNxpNciHal_ext.cc, where a missing bounds check enables an out-of-bounds write. This could lead to local escalation of privilege on the NFC server...

CVE-2020-27046

CVE-2020-27046 affects Android 11 (per initial description). The issue is in nfc_ncif_proc_ee_action of nfc_ncif.cc, where a missing bounds check allows an out-of-bounds read that can lead to local information disclosure with system-level privileges. Exploitation requires no user interaction. NVD...

CVE-2021-0353

CVE-2021-0353 affects Android 11 via a heap buffer overflow in the kisd component, causing a memory corruption vulnerability. The root cause is heap-based memory corruption leading to local escalation of privilege, requiring system-level privileges for impact; exploitation is described as not req...

CVE-2021-0372

CVE-2021-0372 is a local elevation of privilege in Android 11 via getMediaOutputSliceAction in RemoteMediaSlice.java, caused by an unsafe PendingIntent that bypasses permissions without requiring user interaction. The impact is escalation to higher privileges (HIGH per CVSSv3.1) with local access...

CVE-2021-0379

CVE-2021-0379 is a media stack issue in Android 11 where getUpTo17bits in pvmp3_getbits.cpp can read out of bounds due to a heap buffer overflow, potentially enabling information disclosure without code execution. Documented impact is remote information disclosure with user interaction required f...

CVE-2021-0387

CVE-2021-0387 affects Android 11 with a race-condition caused use-after-free in FindQuotaDeviceForUuid (QuotaUtils.cpp). This leads to local elevation of privilege to System level. Exploitation details are not provided in the sources; MITRE ATT&CK IDs are not justified in the documents. Remediati...

CVE-2021-0412

The CVE-2021-0412 issue affects the MediaTek flv extractor and is caused by a missing bounds check that enables an out-of-bounds read. This leads to local information disclosure without additional execution privileges. Documents note no user interaction is required for exploitation. A patch is re...

CVE-2021-0417

CVE-2021-0417 describes a vulnerability in a memory management driver where improper input validation can cause a system crash, leading to local denial of service without extra privileges. The issue is not user-initiated and headers indicate a local attack vector. Connected sources confirm the ro...

CVE-2021-0452

The CVE-2021-0452 entry concerns the Titan M chip firmware. It describes a stack memory disclosure due to uninitialized data, enabling local information disclosure with system privileges required. Exploitation is described as local with no user interaction needed. The issue is tied to Android ker...

CVE-2021-0531

CVE-2021-0531 affects the memory management driver in Android, specifically MTK memory management components, with a use-after-free leading to local privilege escalation and high impact as described in multiple sources. The vulnerability is a memory corruption issue in the memory management drive...

CVE-2021-0615

The CVE-2021-0615 entry concerns Mediatek’s flv extractor. The vulnerability is an out-of-bounds read caused by an integer overflow in the flv extractor’s processing, enabling local information disclosure without extra execution privileges. Impact is described as partial confidentiality loss with...

CVE-2021-0616

CVE-2021-0616 affects the MediaTek ape extractor. The issue is a heap buffer overflow causing an out-of-bounds read, leading to local information disclosure without extra privileges or user interaction. Affected component is the ape extractor (buffer handling) and the documents consistently descr...

CVE-2021-0619

CVE-2021-0619 affects the ape extractor and describes an out-of-bounds read caused by a missing bounds check, leading to local information disclosure with no additional execution privileges required. Exploitation appears to be local, with user interaction not needed, and a patch/mitigation is ref...

CVE-2021-0620

CVE-2021-0620 affects the asf extractor component, where an out-of-bounds read caused by a heap buffer overflow could lead to local information disclosure without additional execution privileges. Exploitation details are not provided in the documents. The issue is associated with a patch: ALPS054...

CVE-2021-0624

CVE-2021-0624 affects the flv extractor component; the root cause is an out-of-bounds read caused by a heap buffer overflow, leading to local information disclosure without extra execution privileges and with no user interaction required. The vulnerability is referenced with Patch ID ALPS05594988...

CVE-2021-0631

The CVE-2021-0631 entry concerns the Mediatek wifi driver with a missing bounds check in the wifi driver, causing a possible system crash and remote denial of service without authentication or user interaction. The issue is described as a missing bounds check that can be exploited to crash the sy...

CVE-2021-0632

CVE-2021-0632 describes an out-of-bounds read in the Mediatek wifi driver caused by a missing bounds check. The affected component is the wifi driver (Mediatek). Exploitation could enable remote information disclosure to a proximal attacker under certain build conditions, with no user interaction...

CVE-2021-0655

CVE-2021-0655 affects the mdlactl driver and is caused by a memory corruption due to an incorrect bounds check. The vulnerability could allow local privilege escalation to SYSTEM with no user interaction required. Impact is described as partial/complete control for the attacker on the affected sy...

CVE-2021-0664

The CVE-2021-0664 entry concerns MediaTek’s ccu component where a use-after-free causes memory corruption, enabling local escalation of privilege with SYSTEM-level execution privileges required. No user interaction is needed. A patch is identified (Patch ID ALPS05827158; Issue ID ALPS05827158) an...

CVE-2021-0899

In CVE-2021-0899, the apusys component in MediaTek exhibits a memory corruption issue caused by a use-after-free, enabling local escalation of privilege with System execution privileges required. No user interaction is needed for exploitation. Affected details and mitigation: Patch ID ALPS0567210...

CVE-2021-25391

CVE-2021-25391 is an Intent redirection vulnerability in Samsung Secure Folder prior to SMR MAY-2021 Release 1. The issue allows an attacker to execute a privileged action through intent redirection. Affected: Secure Folder component on Samsung devices; impact per CVSSv3.1: base score 4.0 (MEDIUM...

CVE-2021-25411

CVE-2021-25411 affects the RKP API prior to Samsung SMR JUN-2021 Release 1, where improper address validation allows a root, local attacker to write read-only kernel memory. The connected documents do not provide explicit affected products/versions beyond this description, nor explicit remediatio...

CVE-2021-25414

CVE-2021-25414 affects Samsung Contacts prior to SMR JUN-2021 Release 1. The underlying issue is improper sanitization of an incoming intent in Samsung Contacts, which enables a local attacker to copy or overwrite arbitrary files using Samsung Contacts privileges. The vulnerability implies local,...

CVE-2021-25455

Summary: CVE-2021-25455 is an OOB read vulnerability in the libsaviextractor.so library, reported to affect the pre-SMR Sep-2021 Release 1. The available descriptions state that an attacker could access an arbitrary memory address via a forged AVI file, via a crafted input, with a local attack ve...

CVE-2021-25468

CVE-2021-25468 concerns a memory-access vulnerability in Samsung Widevine Trustlet. Multiple sources indicate that Widevine trustlet versions prior to SMR Oct-2021 Release 1 are affected and that an attacker with local access could read arbitrary memory addresses due to a boundary/memory check is...

CVE-2021-25486

CVE-2021-25486 concerns an information-disclosure vulnerability in the Samsung ipcdump module, present before SMR Oct-2021 Release 1. The issue allows an attacker to detect device information by analyzing log-packet data. Documents describe vulnerable component (ipcdump) and impact as information...

CVE-2022-26460

The CVE-2022-26460 issue affects the vow component (MediaTek vow) and arises from an incorrect bounds check that enables an out-of-bounds write. This could lead to local privilege escalation with system execution privileges required; no user interaction is needed for exploitation. The entry refer...

CVE-2022-32644

CVE-2022-32644 concerns a race-condition-induced use-after-free in vow, leading to local escalation of privilege with System privileges required. Public documentation consistently describes the vulnerability as local, with no user interaction needed for exploitation. The primary impact is the pot...

CVE-2022-36842

CVE-2022-36842 involves a heap-based overflow in the prepareRecogLibrary function of libSDKRecognitionText.spensdk.samsung.so on Samsung devices. Affected: libSDKRecognitionText.spensdk.samsung.so (pre-SMR Sep-2022 Release 1). Impact: memory access fault. Root cause: heap overflow in prepareRecog...

CVE-2022-36856

The CVE-2022-36856 entry concerns Samsung Telecom application on mobile devices. Affected component: Telecom application prior to SMR Sep-2022 Release 1. Root cause: improper access control that allowed an attacker to start emergency calls via undefined permission. Impact: demonstrated capability...

CVE-2022-39122

The CVE-2022-39122 entry describes a vulnerability in a sensor driver where a missing bounds check can cause an out-of-bounds write, leading to local denial of service in the kernel. Connected sources reference Unisoc chipsets (e.g., SC9863A/SC9832E/SC7731E and related Android versions) and reite...

CVE-2022-42781

CVE-2022-42781 concerns a missing bounds check in the WLAN driver, leading to local denial of service in WLAN services. The connected records identify the affected component as the WLAN driver (often referenced in UNISOC/UNISOC chipset contexts) and describe the vulnerability as an out-of-bounds ...

CVE-2022-47474

CVE-2022-47474 concerns a missing permission check in the telephony service, enabling local information disclosure without extra privileges. Documented impact is high confidentiality risk with local attack vector; no exploitation details or fixes are provided in the connected sources. Affected co...

CVE-2022-47477

CVE-2022-47477 affects the telephony service, with a missing permission check leading to local information disclosure without requiring additional execution privileges. The linked documents consistently describe a zero-day-style local disclosure risk via the telephony module (e.g., UNISOC telepho...

CVE-2022-47478

Affected software: telephony service. Root cause: missing permission check leading to potential local information disclosure. Impact: local information disclosure without additional execution privileges; confidentiality impact HIGH, as per CVE entry. Exploitation status: not described in the prov...

CVE-2022-48240

The CVE-2022-48240 entry concerns the UNISOC camera driver. Affected component: camera driver in UNISOC chipsets. Root cause: missing bounds check causing an out-of-bounds write. Impact: local denial of service with System execution privileges required; confidentiality/integrity are not affected ...

CVE-2022-48378

CVE-2022-48378 concerns the engineermode service in UNISOC chipsets, where a missing permission check enables local denial of service. Attack vector is local, requiring low privileges with no user interaction. The provided documents consistently describe the issue as a local DoS without noting re...

CVE-2022-48444

The CVE-2022-48444 entry concerns the telephony service with a missing permission check that could allow a local attacker to cause denial of service without additional execution privileges. This is supported by NVD and Red Hat records, which describe a local, low-privilege, unprivileged-access vu...

CVE-2022-48451

CVE-2022-48451 affects Unisoc Bluetooth service. The issue is a race-condition leading to an out-of-bounds write, enabling local denial of service with System execution privileges. Documents consistently describe the vulnerability as a local issue in the Bluetooth service, without publicly disclo...

CVE-2023-20642

The CVE-2023-20642 issue is a local out-of-bounds write in the ril module of MediaTek silicon. The root cause is a missing bounds check that can lead to local privilege escalation with System execution privileges required; no user interaction is needed for exploitation. Affected component is ril ...

CVE-2023-20643

The CVE-2023-20643 entry refers to the ril module in MediaTek chips, describing a possible out-of-bounds write caused by a missing bounds check. This could lead to local escalation of privilege with System execution privileges required, and no user interaction is needed. The exploit status is not...

CVE-2023-20685

CVE-2023-20685 concerns the vdec component, where a race condition can trigger a use-after-free, resulting in local escalation of privilege to SYSTEM. The issue is exploitable without user interaction, via a local attack, as described in the CVE description, with a patch identified as ALPS0760857...

CVE-2023-20692

CVE-2023-20692 affects wlan firmware (MediaTek-based devices) where an uncaught exception can crash the system, enabling remote denial of service without privileges or user interaction. The issue is triggered over network access (no auth/UI required). Public details consistently cite a patch: ALP...

CVE-2023-20705

CVE-2023-20705 affects the apu module (MediaTek chips). It describes an out-of-bounds read caused by a missing bounds check, allowing local information disclosure without exploitation prerequisites or user interaction. The entry notes a patch: ALPS07767870 (Issue ID: ALPS07767870). Other referenc...

CVE-2023-21299

CVE-2023-21299 affects Android’s Package Manager, allowing an attacker to determine whether an app is installed via a side‑channel information disclosure. Impact: local information disclosure without extra privileges or user interaction. The vulnerability is described in multiple sources (includi...

CVE-2023-21318

CVE-2023-21318 affects the Android Framework layer in Android 14, where a side-channel information disclosure could allow an attacker to infer whether an arbitrary app is installed. The NVD entry describes a local attack with low complexity, requiring low privileges and no user interaction, leadi...

CVE-2023-33905

The CVE-2023-33905 issue affects the iwnpi server and is described as a missing bounds check causing an out-of-bounds write. Reported impact: local denial of service with System execution privileges required. The documents do not specify affected versions, exploitation details, or available fixes...

CVE-2023-33915

CVE-2023-33915 concerns the LTE protocol stack where a missing permission check may enable remote information disclosure without extra execution privileges. The vulnerability is described across multiple sources (e.g., UNISOC-related entries and Red Hat/NVD records) with root cause as a missing p...

CVE-2023-38468

CVE-2023-38468 documents a vulnerability in the urild service where a missing bounds check enables an out-of-bounds write. The consequence is local denial of service with System execution privileges needed. Public sources describe similar terms across multiple feeds (NVD/Red Hat/CVE records). Aff...