CVE-2020-0476

CVE-2020-0476 describes a vulnerability in Android 11 where, in onNotificationRemoved of Assistant.java, sensitive information could leak to logs, enabling local information disclosure without user interaction (privilege: System execution required). Affects Android-11 devices per the initial desc...

CVE-2020-0482

CVE-2020-0482 affects Android 11, with an out-of-bounds read in IncidentService.cpp caused by an incorrect bounds check. This could allow local information disclosure and, with system privileges, potential escalation. User interaction is not required. The connected documents corroborate the issue...

CVE-2020-10830

The CVE-2020-10830 entry concerns Samsung mobile devices running P(9.0) and Q(10.0) software. In Lockdown mode, an attacker can view notifications by entering multiple PINs, impacting user privacy. The issue is documented with Samsung ID SVE-2019-16590 (March 2020). The provided metrics show a lo...

CVE-2020-10848

CVE-2020-10848 affects Samsung mobile devices running O(8.x), P(9.0) and Q(10.0) with Exynos 9810; the issue is an arbitrary memory mapping in the TrustZone/T EE. Root cause: memory mapping flaw in TEE. Impact per CVSS: HIGH across confidentiality, integrity, and availability. Affected Samsung de...

CVE-2020-10853

CVE-2020-10853 affects Samsung mobile devices running P (Android 9.0). The issue is described as an information disclosure via the Gallery app that leaks cached data. Samsung IDs associated with the vulnerability are SVE-2019-16010, SVE-2019-16011, and SVE-2019-16012. Connected sources reiterate ...

CVE-2020-11607

CVE-2020-11607 concerns Samsung mobile devices running P(9.0)/Q(10.0). The issue is a notification exposure in Lockdown mode caused by the Edge Lighting application, enabling potential information disclosure. Affected component: Edge Lighting on affected Samsung firmware. Root cause: not explicit...

CVE-2020-25046

CVE-2020-25046 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue is in the USB driver where address information is leaked via kernel logging. Root cause is the USB driver handling/logging that exposes kernel address data; impact reportedly includes partial confidential...

CVE-2020-25052

CVE-2020-25052 affects Samsung mobile devices running Q(10.0) on exynos9830-based hardware. The issue arises in H-Arx where indexing is mishandled, enabling memory corruption that can be leveraged to execute arbitrary code or cause a denial of service. The vulnerability is documented across multi...

CVE-2020-27023

CVE-2020-27023 affects Android 11 where in BluetoothMediaBrowserService.java the setErrorPlaybackState path allows a permission bypass via an unsafe PendingIntent. This could lead to local information disclosure with System-level privileges (no user interaction required per the report). CVSS metr...

CVE-2020-27034

CVE-2020-27034 affects Android 11 in the SimSelectNotification path. The issue arises in createSimSelectNotification due to an unsafe PendingIntent, enabling a permission bypass that can lead to local information disclosure with the attacker obtaining user privileges. The advisory describes user ...

CVE-2020-27040

CVE-2020-27040 affects the Android NFC stack (phNxpNciHal_core_initialized in phNxpNciHal.cc). The root cause is a missing bounds check that enables an out-of-bounds read, potentially leading to local information disclosure on an NFC server with System privileges. Exploitation is described as loc...

CVE-2021-0379

CVE-2021-0379 is a media stack issue in Android 11 where getUpTo17bits in pvmp3_getbits.cpp can read out of bounds due to a heap buffer overflow, potentially enabling information disclosure without code execution. Documented impact is remote information disclosure with user interaction required f...

CVE-2021-0424

The CVE-2021-0424 entry concerns a Mediatek device where the in memory management driver has a missing bounds check, enabling a local denial-of-service due to a system crash. Exploitation requires local access with no user interaction. The patch reference is ALPS05403499 (Issue ALPS05393787). Con...

CVE-2021-0497

CVE-2021-0497 describes a memory corruption vulnerability in the Android memory management driver caused by a use-after-free. This can enable local escalation of privilege without user interaction. Affected component is the Android memory management driver on Android SoCs with Android ID A-183461...

CVE-2021-0622

CVE-2021-0622 pertains to the asf extractor and involves a heap-based out-of-bounds read that can disclose local information without extra privileges or user interaction. Exploitation is described as local. Patch ID: ALPS05489178; Issue ID: ALPS05561388. Connected sources describe the vulnerabili...

CVE-2021-25396

CVE-2021-25396 affects Samsung devices with NPU firmware prior to SMR MAY-2021 Release 1, where improper input validation enables arbitrary memory writes and code execution. Root cause is input validation weakness in the NPU firmware. Impact per CVSS indicates local access, high confidentiality/i...

CVE-2021-25415

CVE-2021-25415 concerns Samsung Mobile’s RKP (kernel protection) before SMR JUN-2021 Release 1. The vulnerability stems from improper address validation, enabling a local attacker to remap EL2 memory as writable if EL1 is compromised. Documents identify the affected component as Samsung RKP and d...

CVE-2021-25458

CVE-2021-25458 describes a NULL pointer dereference in the ION driver prior to Samsung SMR Sep-2021 Release 1, leading to memory corruption. Affected component: ION driver; root cause relates to a NULL pointer dereference. Impact (per sources): local attacker could trigger memory corruption with ...

CVE-2021-25517

CVE-2021-25517 affects Samsung LDFW firmware prior to SMR Dec-2021 Release 1. The vulnerability arises from improper input validation in LDFW, enabling arbitrary code execution on affected devices. Documented impact includes remote/local (depending on context) execution with high severity (CVSS v...

CVE-2021-25519

CVE-2021-25519 affects Samsung CPLC (Chip/Platform Level Controller) prior to SMR Dec-2021 Release 1. The issue is due to improper access control that allows local attackers to access CPLC information without permission. Affected components include CPLC’s local access path; impact is information ...

CVE-2022-26428

CVE-2022-26428 describes a race condition in the MediaTek video codec that can cause memory corruption and local privilege escalation. The vulnerability is triggered without user interaction and requires local access with high privileges; the base CVSSv3.1 vector indicates Local attack, High atta...

CVE-2022-39085

Technical details about CVE-2022-39085 are not publicly available in the provided connected documents. Monitor for updates from vendor advisories and security feeds.

CVE-2022-39101

CVE-2022-39101 concerns a missing permission check in the power management service. The vulnerability allows a local attacker with low privileges to set up the power management service without additional execution privileges, potentially compromising confidentiality, integrity, and availability (...

CVE-2022-47490

CVE-2022-47490 concerns the UNISOC soter service, where a missing permission check is identified as the root cause. The available documents describe this flaw as enabling local denial of service with no additional execution privileges, affecting the soter service in UNISOC chipsets. Exploitation ...

CVE-2022-48245

CVE-2022-48245 concerns the UNISOC audio service. Public records describe a missing permission check in the audio service, enabling local privilege escalation with no additional execution privileges. CVSSv3.1 base metrics cited are AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.8 (HIGH). Affec...

CVE-2022-48386

The CVE-2022-48386 entry concerns the apipe driver with a use-after-free caused by a logic error, leading to local denial of service with SYSTEM privileges. This is documented across multiple feeds (NVD, Red Hat, CVE List) and references UNISOC chipsets’ apipe driver. No explicit patch/version re...

CVE-2022-48442

CVE-2022-48442 affects the dialer service with a missing permission check, enabling local denial of service with no extra privileges. The connected sources consistently describe this impact, but do not provide concrete exploit details or remediation (no patch/version information is present in the...

CVE-2023-20641

The CVE-2023-20641 vulnerability affects the ril module in MediaTek chips, caused by a missing bounds check that enables an out-of-bounds write. It can lead to local escalation of privilege with System execution privileges required, and no user interaction is needed. A patch is available (ALPS076...

CVE-2023-20720

CVE-2023-20720 affects the pqframework component. The issue is an out-of-bounds read caused by a missing bounds check, enabling local escalation of privilege with SYSTEM-level execution privileges required. Exploitation does not require user interaction. The code is associated with patch ALPS0762...

CVE-2023-20807

CVE-2023-20807 affects MediaTek’s dpe component, where a missing bounds check enables an out-of-bounds write. This is described as a local escalation of privilege with System execution privileges required, and no user interaction is needed for exploitation. The issue is associated with the dpe mo...

CVE-2023-21260

CVE-2023-21260 affects Android Automotive OS (AAOS) Packages component. A malicious app can exploit the notification access permission dialog by embedding an excessively long service label that can overflow the user prompt and display misleading information as a system message for user confirmati...

CVE-2023-21349

In CVE-2023-21349, the Android Package Manager exposes a side-channel to determine whether an app is installed without query permissions, enabling local information disclosure with no privileges required and no user interaction. Multiple connected sources (NVD entry and Red Hat/CVE pages, CNVD, a...

CVE-2023-30920

CVE-2023-30920 affects a messaging service where a missing permission check allows local information disclosure without extra execution privileges. The NVD entry assigns CVSS 3.1: Local access, Low attack complexity, Privileges Required: Low, with Confidentiality impact High and no integrity/avai...

CVE-2023-30923

CVE-2023-30923 involves a missing permission check in the messaging service, enabling local information disclosure without requiring any additional execution privileges. The available sources describe the vulnerability at the component level (messaging service) and the impact (local information d...

CVE-2023-30941

CVE-2023-30941 concerns a missing permission check in the telephony service that can lead to local information disclosure without requiring additional execution privileges. The available documents describe the vulnerability as a local information disclosure flaw (CONFIDENTIALITY impact) with priv...

CVE-2023-32805

CVE-2023-32805 concerns an out-of-bounds write in MediaTek power-related components due to an insecure default value, enabling local privilege escalation with System execution privileges. Exploitation is described as requiring user interaction; affected details include the need for a patch (ALPS0...

CVE-2023-32854

CVE-2023-32854 affects MediaTek devices via the ril module, with an out-of-bounds write caused by a missing bounds check. This can enable local escalation of privileges to SYSTEM level without user interaction. Patch: ALPS08240132 (Issue ALPS08240132) is referenced as the remediation. No exploita...

CVE-2023-32857

MediaTek chipsets (display module) are affected by CVE-2023-32857 due to an incorrect status check that allows an out-of-bounds read, enabling local information disclosure with SYSTEM privileges required and no user interaction. A patch is referenced (ALPS07993705; ALPS07993710). Exploitation sta...

CVE-2023-33883

CVE-2023-33883 involves a missing permission check in the telephony service that could allow local information disclosure without extra execution privileges. Sources consistently describe a local-privilege check omission as the root cause. Affected products include UNISOC chipsets/telephony imple...

CVE-2023-33892

CVE-2023-33892 concerns the minimal-privilege local information-disclosure flaw in the fastDial service. The root cause, per multiple sources, is a missing permission check in fastDial, enabling an attacker with local access and low privileges to read information without requiring extra execution...

CVE-2023-33895

CVE-2023-33895 affects the fastDial service. The root cause is a missing permission check which can cause local information disclosure without requiring additional execution privileges. Multiple sources (NVD, Red Hat, CVE lists) describe the impact as local information disclosure; exploitation st...

CVE-2023-38446

CVE-2023-38446 affects vowifiservice, with the root cause described as a possible missing permission check. This weakness could allow a local attacker to cause denial of service without needing additional privileges. CVSS v3.1 metrics indicate Local access, Low attack complexity, Low privileges r...

CVE-2023-40632

The CVE-2023-40632 entry concerns the jpg driver, where a logic error can cause a use-after-free, enabling remote information disclosure without extra execution privileges. The vulnerability is associated with memory reuse after release, per multiple sources (e.g., Red Hat, NVD, PRION, CVE record...

CVE-2023-42672

The CVE-2023-42672 entry concerns UNISOC/imsservice with a missing permission check, enabling an attacker to write permission usage records and cause local information disclosure without executing code. Affected component: imsservice in UNISOC chipsets. Root cause: absence of permission validatio...

CVE-2023-42684

CVE-2023-42684 concerns the gsp driver within UNISOC chipsets, where a missing bounds check can cause an out-of-bounds read. The issue is described as leading to local denial of service with System execution privileges required. Documents consistently cite the gsp driver as the vulnerable compone...

CVE-2023-48359

CVE-2023-48359 affects the autotest driver (Unisoc-based platforms) and is caused by improper input validation that can trigger an out-of-bounds write. The documented impact is a local denial of service with SYSTEM privileges required. Affected scope and exact product/version details are not expl...

CVE-2024-20122

In vdec, a defect described as an out-of-bounds read due to improper structure design could cause local information disclosure with system-level privileges required. The vulnerability requires no user interaction for exploitation. A remediation is listed as Patch ID ALPS09008925 (Issue MSV-1572)....

CVE-2024-34663

CVE-2024-34663 concerns an integer overflow in libSEF.quram.so present on Samsung Mobile devices prior to SMR Oct-2024 Release 1. The issue enables local attackers to perform out-of-bounds memory writes, with a local attack vector and no user interaction required. Publicly documented impact indic...

CVE-2025-32324

The CVE-2025-32324 entry concerns the Android ActivityManagerShellCommand.java onCommand path, where a confused deputy could allow arbitrary activity launches and lead to local privilege escalation. The underlying issue enables exploitation with no extra execution privileges and without user inte...

CVE-2025-48540

CVE-2025-48540 describes a local elevation-of-privilege vulnerability in the Android stack caused by a logic error in processTransactInternal of RpcState.cpp, which can trigger a local out-of-memory write. Exploitation requires local access; no user interaction is needed. Public references in And...