CVE-2021-0461

CVE-2021-0461 (Android kernel, iaxxx-core sensor) : The issue arises in iaxxx_core_sensor_change_state within iaxxx-module.c, where a missing bounds check can cause an out-of-bounds write. This leads to local escalation of privilege with System execution privileges required, and exploitation does...

CVE-2021-0497

CVE-2021-0497 describes a memory corruption vulnerability in the Android memory management driver caused by a use-after-free. This can enable local escalation of privilege without user interaction. Affected component is the Android memory management driver on Android SoCs with Android ID A-183461...

CVE-2021-0666

CVE-2021-0666 concerns MediaTek’s Apusys component where an incorrect bounds check can cause an out-of-bounds read. This leads to local information disclosure with system execution privileges needed to exploit, and does not require user interaction. The vulnerability is documented across multiple...

CVE-2021-0902

CVE-2021-0902 affects MediaTek Apusys. The issue is an out-of-bounds read caused by an incorrect bounds check in apusys, potentially leading to local information disclosure with SYSTEM privileges required for exploitation and no user interaction. Public details in the initial and connected record...

CVE-2021-22495

CVE-2021-22495 affects Samsung mobile devices with Exynos SoCs (O/8.x, P/9.0, Q/10.0, R/11.0) where the Mali GPU driver permits out-of-bounds access and can trigger a device reset. This is documented across multiple sources in the connected docs (NVD, Red Hat advisory, CVE records), referencing S...

CVE-2021-25415

CVE-2021-25415 concerns Samsung Mobile’s RKP (kernel protection) before SMR JUN-2021 Release 1. The vulnerability stems from improper address validation, enabling a local attacker to remap EL2 memory as writable if EL1 is compromised. Documents identify the affected component as Samsung RKP and d...

CVE-2021-25458

CVE-2021-25458 describes a NULL pointer dereference in the ION driver prior to Samsung SMR Sep-2021 Release 1, leading to memory corruption. Affected component: ION driver; root cause relates to a NULL pointer dereference. Impact (per sources): local attacker could trigger memory corruption with ...

CVE-2021-25462

CVE-2021-25462 describes a NULL pointer dereference in Samsung NPU driver prior to SMR Sep-2021 Release 1, leading to memory corruption. The vulnerability is local (attack vector: LOCAL) with low attack complexity per CVSS v3.1, and impacts memory integrity/availability as specified. Affected com...

CVE-2021-25470

CVE-2021-25470 affects TEEGRIS Secure OS prior to SMR Oct‑2021 Release 1. The issue is an improper caller check logic in the SMC call that can be used to compromise the Trusted Execution Environment (TEE). Impact is described as TEE compromise; no exploit details provided in the documents. Mitiga...

CVE-2022-38688

CVE-2022-38688 : The telephony service contains a missing permission check that enables local information disclosure without additional execution privileges. The NVD entry assigns a CVSS v3.1 base score of 5.5 (Local exploit, Low complexity, Low privileges required; Confidentiality impact: High)....

CVE-2022-39085

Technical details about CVE-2022-39085 are not publicly available in the provided connected documents. Monitor for updates from vendor advisories and security feeds.

CVE-2022-39101

CVE-2022-39101 concerns a missing permission check in the power management service. The vulnerability allows a local attacker with low privileges to set up the power management service without additional execution privileges, potentially compromising confidentiality, integrity, and availability (...

CVE-2022-39113

The CVE-2022-39113 entry involves a missing permission check in the Music service that could allow local denial of service without extra privileges. Connected documents corroborate a local impact but do not provide concrete product/version details for the Music service itself. Some sources refere...

CVE-2022-47498

The CVE-2022-47498 entry relates to the UNISOC/UNISOC soter service. The root cause described across connected documents is a missing bounds check that enables an out-of-bounds write. Impact specified is local denial of service with system‑level execution privileges required, and the CVSS indicat...

CVE-2022-48238

CVE-2022-48238 affects UNISOC chipsets’ Image filter module. The root cause is a missing bounds check that enables out-of-bounds writes, leading to local denial of service with System execution privileges required. Documents consistently describe the impact as local DoS with high availability imp...

CVE-2022-48239

CVE-2022-48239 is a camera driver vulnerability describing an out-of-bounds write caused by a missing bounds check, leading to local denial of service with System-level privileges required. Connected sources identify this as affecting UNISOC camera driver code (notably on Unisoc/SC-series chipset...

CVE-2022-48249

CVE-2022-48249 affects UNISOC Chipsets’ audio service, where a missing permission check in the audio service could allow local escalation of privileges with no additional execution privileges. Base CVSS v3.1 score is 7.8 (HIGH); vectors indicate Local Privilege Escalation with Low complexity and ...

CVE-2023-20625

CVE-2023-20625 affects the adsp component and is caused by a race condition leading to a double free. This can allow local privilege escalation with SYSTEM-level execution privileges, and exploitation does not require user interaction. The entry lists patch ALPS07628532 (Issue ID ALPS07628532) as...

CVE-2023-20700

CVE-2023-20700 affects Widevine in MediaTek chips. The vulnerability is described as an out-of-bounds write caused by a logic error, enabling local escalation of privilege with System execution privileges required; user interaction is not needed. Patch ID ALPS07643304 (Issue ALPS07643304) is refe...

CVE-2023-20753

CVE-2023-20753 affects rpmb (MediaTek context in multiple feeds). A logic error enables an out-of-bounds write, which could lead to local privilege escalation with SYSTEM execution privileges required. Exploitation does not require user interaction. A patch is referenced as ALPS07460390 (Issue AL...

CVE-2023-20793

CVE-2023-20793 affects MediaTek devices via the apu module, causing memory corruption from a missing bounds check. This can permit local denial of service with SYSTEM privileges, without user interaction. The issue is tied to firmware/driver code (apu) and has a patch identified as ALPS07767818. ...

CVE-2023-20822

CVE-2023-20822 affects netdagent and involves an out-of-bounds write caused by a missing bounds check. The issue can lead to local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. A patch referenced in sources is ALPS07944012 (...

CVE-2023-21349

In CVE-2023-21349, the Android Package Manager exposes a side-channel to determine whether an app is installed without query permissions, enabling local information disclosure with no privileges required and no user interaction. Multiple connected sources (NVD entry and Red Hat/CVE pages, CNVD, a...

CVE-2023-30864

Publicly available documents provided here do not contain concrete technical details (affected version, component specifics, exploit info). Technical specifics are not publicly disclosed in the supplied sources. Monitor for updates.

CVE-2023-30920

CVE-2023-30920 affects a messaging service where a missing permission check allows local information disclosure without extra execution privileges. The NVD entry assigns CVSS 3.1: Local access, Low attack complexity, Privileges Required: Low, with Confidentiality impact High and no integrity/avai...

CVE-2023-32822

The issue CVE-2023-32822 affects the ftm component and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local escalation of privilege with System-level execution privileges required, and no user interaction is needed to exploit (per the consolidated descri...

CVE-2023-32857

MediaTek chipsets (display module) are affected by CVE-2023-32857 due to an incorrect status check that allows an out-of-bounds read, enabling local information disclosure with SYSTEM privileges required and no user interaction. A patch is referenced (ALPS07993705; ALPS07993710). Exploitation sta...

CVE-2023-32862

MediaTek chips (display module) affected by CVE-2023-32862 due to an incorrect bounds check, causing an out-of-bounds read that could enable local privilege escalation to System. Exploitation reportedly requires no user interaction; base CVSS suggests local access with high impact on confidential...

CVE-2023-32882

The CVE-2023-32882 entry relates to memory corruption in the battery module of MediaTek-based devices. The vulnerability arises from a missing bounds check in the battery component, enabling local escalation of privilege with System execution privileges required and no user interaction needed. Af...

CVE-2023-33891

CVE-2023-33891 affects the telephony service due to a missing permission check, enabling local information disclosure without additional privileges. The provided documents identify the issue and its impact but do not specify affected products, exact patch versions, or remediation steps. Exploitat...

CVE-2023-33910

CVE-2023-33910 concerns the Contacts Service, where a missing permission check is reported to allow local information disclosure with no additional execution privileges. The NVD entry lists a CVSS v3.1 base score of 5.5 (Attack Vector: Local, Attack Complexity: Low, Privileges Required: Low, User...

CVE-2023-40647

CVE-2023-40647 concerns a missing permission check in the Messaging component that could enable local information disclosure without requiring additional execution privileges. Multiple connected sources (including Red Hat, NVD, CNNVD, and related advisories) consistently describe the issue as a l...

CVE-2023-42678

CVE-2023-42678 affects the imsservice in UNISOC chipsets. The root cause is a missing permission check that allows writing permission usage records for an app, enabling local information disclosure without additional execution privileges. The NVD entry (CVSS v3.1: LOCAL attack vector, LOW complex...

CVE-2023-42695

CVE-2023-42695 : In the wifi service, a missing permission check could allow local escalation of privilege. Multiple sources (NVD, Red Hat, CVE listing, CNNVD) describe this issue as a local, low-privilege path to obtain HIGH impact on confidentiality, integrity, and availability, with CVSSv3.1 b...

CVE-2023-48355

In CVE-2023-48355, the issue is a missing bounds check in the jpg driver, leading to an out-of-bounds write. The impact is locally exploitable with SYSTEM privileges required and can cause denial of service (availability impact high) while confidentiality and integrity are not affected. Public re...

CVE-2024-20109

CVE-2024-20109 affects the component identified as ccu (referenced across Red Hat/NVD entries and related advisories). The root cause is a missing bounds check that allows an out-of-bounds write, resulting in local escalation of privileges with System-level execution privileges required. No user ...

CVE-2024-20122

In vdec, a defect described as an out-of-bounds read due to improper structure design could cause local information disclosure with system-level privileges required. The vulnerability requires no user interaction for exploitation. A remediation is listed as Patch ID ALPS09008925 (Issue MSV-1572)....

CVE-2026-0027

The CVE-2026-0027 issue affects the arm-smmu-v3.c function smmu_detach_dev, where a use-after-free can cause an out-of-bounds write. This vulnerability enables local privilege escalation with System execution privileges required; exploitation does not require user interaction. The available conne...

CVE-2026-0051

CVE-2026-0051 describes a vulnerability in multiple functions of ubsan_throwing_runtime.cpp that can trigger a system crash via improper input validation, leading to remote denial of service with no extra privileges and no user interaction required. The CVE is documented across NVD entries and re...

CVE-2026-0063

CVE-2026-0063 affects the Android framework component PhoneInterfaceManager.java, where a logic error in setAllowedCarriers could disable carrier restrictions, enabling local privilege escalation with no additional privileges and no user interaction required. The issue is cataloged as an Elevatio...

CVE-2026-0070

CVE-2026-0070 affects Android’s DevicePolicyManagerService.java, where improper input validation can enable hiding a system critical package, causing a local denial of service without extra privileges. The available documents consistently describe the issue as a local DoS through the described co...

CVE-2026-0086

CVE-2026-0086 affects the Android component DisableSupervisionActivity.kt, where in onCreate a missing null check can permit deletion of supervision data. This enables local escalation of privilege without extra execution privileges and without user interaction. CVSSv3.1 vector (L, L, N, U) yield...

CVE-2026-0100

CVE-2026-0100 : The description across NVD, OSV, and vuln enrichment indicates a vulnerability in the Load path of LoadedArsc.cpp causing an out-of-bounds write via a heap buffer overflow. This can enable local privilege escalation with no extra execution privileges required; exploitation is poss...

CVE-2014-9781

CVE-2014-9781 is a buffer overflow in drivers/video/fbcmap.c within the Qualcomm components of Android on Nexus 7 (2013) devices, prior to 2016-07-05. The underlying issue is a buffer overflow in the fbcmap driver that could allow a crafted application to escalate privileges. Affected stack: Andr...

CVE-2014-9897

CVE-2014-9897 affects Android on Nexus 5, in Qualcomm components (sound/soc/msm/qdsp6v2/msm-lsm-client.c). The vulnerability arises because the code path in msm-lsm-client.c does not validate certain user-space data, enabling an attacker to obtain sensitive information via a crafted application. ...

CVE-2014-9964

Technical details about CVE-2014-9964 (affected components, root cause, affected versions, exploitability, remediation) are not publicly provided in the connected documents. Monitor for updates from official sources (NVD, Android bulletins) for specifics.

CVE-2014-9979

CVE-2014-9979 affects Qualcomm products with CAF Android builds using the Linux kernel. The vulnerability is a TrustZone system call issue caused by an uninitialized variable in the kernel, potentially leading to compromise of secure memory. The available documents explicitly describe the root ca...

CVE-2015-3847

CVE-2015-3847 is an Android Bluetooth elevation-of-privilege issue that could allow a crafted application to delete stored SMS messages. The connected Android security bulletin notes this as a moderate-severity vulnerability affecting 5.1.1 and earlier builds, with patches available in builds LMY...

CVE-2015-6624

CVE-2015-6624 affects Android 6.0 and earlier builds; System Server information disclosure allows a crafted application to obtain sensitive permissions (Signature or SignatureOrSystem). The vulnerability is described as a local information-disclosure in System Server, enabling access to restricte...

CVE-2015-9003

In CVE-2015-9003, a cryptographic issue in TrustZone could potentially affect all Android releases from CAF using the Linux kernel. The connected documents identify TrustZone/Android CAF/Linux kernel as the affected area, but do not provide detailed root cause, affected subcomponents, specific vu...