CVE-2019-20572

CVE-2019-20572 describes a buffer overflow in the load_kernel path on Samsung mobile devices with Exynos chips running O(8.1) and P(9.0). The issue is triggered by untrusted data and is documented across multiple feeds (NVD entry and Red Hat/CVE references) under the Samsung ID SVE-2019-14939. Th...

CVE-2019-2058

CVE-2019-2058 concerns a vulnerability in the Android 10 library component libAACdec where an out-of-bounds read can lead to remote information disclosure . The entry states that exploitation requires user interaction and that the affected product is Android 10. Connected sources corroborate the ...

CVE-2019-20581

CVE-2019-20581 describes a stack overflow in the HDCP Trustlet on Samsung mobile devices with Exynos chipsets (N7.x, O8.x, P9.0), leading to arbitrary code execution. Affected component is the HDCP Trustlet; root cause is a stack overflow. Impact is rated high to critical in CVSS terms (in the pr...

CVE-2019-20615

CVE-2019-20615 affects Samsung mobile devices running N(7.x) and O(8.x) software. The issue enables bypassing Factory Reset Protection (FRP) through SVoice Terms & Conditions, as referenced by Samsung ID SVE-2018-13547 (March 2019). Publicly available documents in the provided set reiterate this ...

CVE-2019-2068

CVE-2019-2068 affects Android 10 via libxaac, where an out-of-bounds write due to a missing bounds check could enable remote code execution. Exploitation requires user interaction; the CVSS data indicates network access as a potential vector (NVD) and high impact (RCE) per Android bulletin. Remed...

CVE-2019-2074

This entry concerns CVE-2019-2074 affecting libxaac in Android 10. The issue is an out-of-bounds write due to a missing bounds check, enabling remote code execution. Impact: remote code execution with user interaction required, configured as HIGH in CVSS 3.1. Affected component: libxaac in Androi...

CVE-2019-2167

The CVE-2019-2167 entry concerns Google Android 10’s libxaac, where information disclosure can occur due to uninitialized data. Affected component/file: libxaac within Android 10. Root cause: uninitialized data leads to partial confidentiality impact (information disclosure) without executing cod...

CVE-2019-2216

CVE-2019-2216 affects Android 10 and is described across multiple sources as a local elevation of privilege due to improper input validation in overlay notifications. The vulnerability could allow a malicious overlaying app to gain high privileges without notifying the user, with exploitation req...

CVE-2019-9244

CVE-2019-9244 affects Android 10 devices via the NFC component, where a missing bounds check enables an out-of-bounds read and local information disclosure. The issue requires user interaction to exploit and has a Media/Confidentiality impact (C/H) per the CVE details, with CVSSv3.1 base score 5....

CVE-2019-9249

CVE-2019-9249 refers to a Bluetooth vulnerability in Android 10 where an out-of-bounds read could lead to local information disclosure without privileges or user interaction. The issue arises from a missing bounds check in Bluetooth handling. Impact per sources: potential exposure of partial info...

CVE-2019-9252

CVE-2019-9252 affects Android 10, where the libavc component suffers an out-of-bounds read caused by uninitialized data. This leads to remote information disclosure without additional execution privileges; exploitation requires user interaction. Multiple sources (NVD, Red Hat, CVE lists) consiste...

CVE-2019-9350

CVE-2019-9350 corresponds to an Elevation of Privilege in Android 10 Keymaster, caused by a use-after-free in a component handling crypto operations. This vulnerability could allow a local attacker to escalate privileges without additional execution privileges or user interaction, as described ac...

CVE-2019-9364

CVE-2019-9364 affects Android 10 via AudioService. The issue is a permissions bypass that can trigger background user audio, leading to local information disclosure without additional privileges. Exploitation details are not provided beyond the described local disclosure; no explicit on-device ex...

CVE-2019-9387

CVE-2019-9387 describes an out-of-bounds read in the Android Bluetooth stack caused by a missing bounds check. The vulnerability could enable remote information disclosure without requiring privileges or user interaction. Affected product is Android 10 (Android Bluetooth stack); the description d...

CVE-2019-9404

CVE-2019-9404 affects Android 10 devices via the Bluetooth stack, where a missing bounds check can cause a remote denial-of-service without user interaction. The issue is documented across multiple sources (NVD and Red Hat) with a consistent description: uncontrolled termination due to an out-of-...

CVE-2019-9405

CVE-2019-9405 affects libAACdec in Android 10’s Media framework, with an out-of-bounds write caused by an integer overflow. This could permit remote code execution with the attacker needing only user interaction (no additional privileges). The Android 10 security release notes list CVE-2019-9405 ...

CVE-2019-9419

The CVE-2019-9419 issue affects the Android Bluetooth stack on Android 10. It is a possible out-of-bounds read due to a missing bounds check that can allow remote information disclosure without additional privileges or user interaction. Exploitation would occur over the network. Android’s securit...

CVE-2020-0011

CVE-2020-0011 affects the FPC Fingerprint TEE in Android kernels. The description in multiple sources states an out-of-bounds write in get_auth_result of fpc_ta_hw_auth.c due to a missing bounds check, enabling local elevation of privilege with System-level privileges required. Exploitation is de...

CVE-2020-0021

CVE-2020-0021 affects Android 10 in the PackageManagerService.removeUnusedPackagesLPw path, where a missing package dependency test can cause a permanent denial-of-service. The vulnerability description states that remote DoS is possible with user privileges and no user interaction required. Conn...

CVE-2020-0130

CVE-2020-0130 affects Android 11 screencap. The issue is command injection due to improper input validation in screencap, enabling local elevation of privilege with User-level privileges and no user interaction required. Impact is local, affecting system processes; exploitation would require acce...

CVE-2020-0162

CVE-2020-0162 affects Android’s Media Framework (MPEG4Extractor.cpp). The vulnerability arises from improper input validation in parseSampleAuxiliaryInformationOffsets, enabling resource exhaustion that could lead to remote Denial of Service on Android 10. The issue’s impact is a DoS with partial...

CVE-2020-0176

The CVE-2020-0176 issue is described across multiple sources as an out-of-bounds read in avdt_msg_prs_rej of avdt_msg.cc, enabling remote information disclosure on Android 10 with network access and no user interaction. The vulnerability arises from improper input validation and affects Android-1...

CVE-2020-0200

CVE-2020-0200 is an Android 10 issue affecting the Media Framework: a missing bounds check in ReadLittleEndian within raw_bit_reader.cc can trigger an out-of-bounds read and information disclosure. The NVD entry notes network access as the attack vector with no execution privileges, while the CVS...

CVE-2020-0234

CVE-2020-0234 affects the Android kernel audio component (kernel driver for msm-cirrus playback). The issue is in crus_afe_get_param in msm-cirrus-playback.c, where a missing bounds check allows an out-of-bounds write. This can enable local privilege escalation with no extra privileges and no use...

CVE-2020-0298

CVE-2020-0298: A local elevation-of-privilege in Android 11 Bluetooth due to a missing permission check that allows an attacker to enable/disable Bluetooth without user interaction. Affects Bluetooth subsystem; root cause is lack of permission validation in Bluetooth flow, enabling local privileg...

CVE-2020-0302

CVE-2020-0302 affects Android 11 in Settings, where an unsafe PendingIntent enables a permission bypass leading to local information disclosure. Exploitation requires no user interaction, with user privileges required. Root cause: unsafe PendingIntent in Settings. Impact: partial disclosure of da...

CVE-2020-0311

In CVE-2020-0311, the issue concerns Android 11's InputManagerService where an unsafe PendingIntent enables a permission bypass, causing local information disclosure. Exploitation is possible with LOCAL access and does not require user interaction, but certain user/EOS privileges are indicated as...

CVE-2020-0317

CVE-2020-0317 affects Android 11, where UsageStatsManager may access protected data due to a missing permission check. The described issue is a local information disclosure with no required user interaction. Documents confirm that Android 11 includes security fixes and release notes listing mitig...

CVE-2020-0318

The CVE-2020-0318 entry affects Android 11 System UI, where an uncaught exception can crash the system, causing a local Denial of Service without requiring user interaction. The impact is a local, permanent DoS on affected devices, with no confidentiality/integrity concerns stated. Exploitation i...

CVE-2020-0328

CVE-2020-0328 affects Android 11, with a vulnerability in the camera component where an integer overflow can trigger an out-of-bounds read. This may lead to local information disclosure and system-level execution privileges, without user interaction. The issue is documented across multiple source...

CVE-2020-0349

CVE-2020-0349 affects Android 11 NFC functionality. The issue is an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with system-level privileges required. No user interaction is needed for exploitation. Reported impact matches Android’s release notes and...

CVE-2020-0358

CVE-2020-0358: In Android's SurfaceFlinger, a race condition leads to a use-after-free vulnerability. This is a local elevation-of-privilege issue on Android 11, requiring System privileges with no user interaction. CVSS data (3.1) indicates LOCAL, HIGH-privileges, with Confidentiality/Integrity/...

CVE-2020-0362

CVE-2020-0362 affects Android 11 and targets the libstagefright component. The issue is a resource exhaustion vulnerability caused by improper input validation, leading to a remote denial of service. Exploitation requires user interaction and is delivered over a network, with the CVSS v3.1 vector...

CVE-2020-0426

CVE-2020-0426 affects Android 11 where in SyncManager a permission bypass can occur due to an unsafe PendingIntent. This could enable local information disclosure with no extra privileges and without user interaction. The available documents describe the issue but do not provide exploit details, ...

CVE-2020-0476

CVE-2020-0476 describes a vulnerability in Android 11 where, in onNotificationRemoved of Assistant.java, sensitive information could leak to logs, enabling local information disclosure without user interaction (privilege: System execution required). Affects Android-11 devices per the initial desc...

CVE-2020-0489

CVE-2020-0489 involves a suspected out-of-bounds write in the Android media framework (Parse_data in eas_mdls.c) which could lead to remote code execution in the media extractor. Affected software is Android 11, notably Pixel devices. The root cause is a missing bounds check in Parse_data, enabli...

CVE-2020-0497

Technical details about CVE-2020-0497 are not provided in the supplied documents beyond the basic Android biometric disclosure information. Monitor for updates for any new specifics on affected components, affected versions, impact, and remediation.

CVE-2020-10840

Summary: CVE-2020-10840 describes a kernel pointer leak in the vipx driver affecting Samsung mobile devices with Exynos 9610 (P9.0 and Q10.0). The Samsung internal ID is SVE-2019-16293 (February 2020). The Red Hat entry reiterates the same description. What is affected: Samsung mobile devices wit...

CVE-2020-10848

CVE-2020-10848 affects Samsung mobile devices running O(8.x), P(9.0) and Q(10.0) with Exynos 9810; the issue is an arbitrary memory mapping in the TrustZone/T EE. Root cause: memory mapping flaw in TEE. Impact per CVSS: HIGH across confidentiality, integrity, and availability. Affected Samsung de...

CVE-2020-10850

The CVE-2020-10850 entry describes a buffer overflow in the secure bootloader USB path on Samsung mobile devices with Exynos SoCs (Android O[8.x], P[9.0], Q[10.0]), enabling arbitrary code execution. The issue is tied to the secure bootloader’s handling of USB buffers (root cause: buffer overflow...

CVE-2020-11607

CVE-2020-11607 concerns Samsung mobile devices running P(9.0)/Q(10.0). The issue is a notification exposure in Lockdown mode caused by the Edge Lighting application, enabling potential information disclosure. Affected component: Edge Lighting on affected Samsung firmware. Root cause: not explicit...

CVE-2020-25052

CVE-2020-25052 affects Samsung mobile devices running Q(10.0) on exynos9830-based hardware. The issue arises in H-Arx where indexing is mishandled, enabling memory corruption that can be leveraged to execute arbitrary code or cause a denial of service. The vulnerability is documented across multi...

CVE-2020-25057

CVE-2020-25057 affects LG mobile devices running Android 10, where MDMService does not properly restrict APK installations. This is the core described issue across multiple sources linked to LG’s LVE-SMP-200011 (July 2020). Concrete details in the connected documents are limited to the affected c...

CVE-2020-25283

CVE-2020-25283 affects LG mobile devices running Android 8.x–10. The issue is described as the BT Manager bypassing intended access restrictions on a certain mode. The connected records indicate the affected product family (LG Android devices) and component involved (BT Manager), but do not provi...

CVE-2020-27033

CVE-2020-27033 affects Android’s NFC stack (nfc_ncif_proc_get_routing in nfc_ncif.cc). A missing bounds check can cause an out-of-bounds read, enabling local information disclosure with potential system-level execution privileges. Exploitation is local and does not require user interaction. Publi...

CVE-2020-27040

CVE-2020-27040 affects the Android NFC stack (phNxpNciHal_core_initialized in phNxpNciHal.cc). The root cause is a missing bounds check that enables an out-of-bounds read, potentially leading to local information disclosure on an NFC server with System privileges. Exploitation is described as loc...

CVE-2020-27043

CVE-2020-27043 refers to an out-of-bounds read in the Android NFC stack. Specifically, the issue is described in nfc_enabled of nfc_main.cc, caused by an incorrect increment, leading to possible local information disclosure when firmware runs with system privileges. Affected product is Android 11...

CVE-2020-35552

CVE-2020-35552 involves the GPS daemon on Samsung mobile devices with non-Qualcomm chipsets (O 8.x, P 9.0, Q 10.0). The vulnerability arises from an incorrect configuration file in the GPS service, allowing an attacker to obtain sensitive location information. Connected records confirm the affect...

CVE-2021-0348

The CVE-2021-0348 issue affects Android’s vpu as reported in multiple sources. A missing bounds check enables an out-of-bounds write, leading to local escalation of privilege with System execution privileges required. Impact is noted for Android-9, Android-10, and Android-11. No user interaction ...

CVE-2021-0358

In netdiag, a command-injection flaw exists due to improper input validation. This could enable local escalation to System privileges on Android devices (Android-10/Android-11) with no user interaction required. The issue is described across multiple sources (e.g., NVD/Red Hat) and is associated ...