CVE-2020-0154

CVE-2020-0154 affects Android 10 with the vulnerability located in the nci_proc_core_rsp function of nci_hrcv.cc. The root cause is an out-of-bounds read due to an incorrect bounds check, which could enable local information disclosure on devices with System privileges and requires no user intera...

CVE-2020-0164

CVE-2020-0164 is an Android/Pixel vulnerability affecting the NFC subsystem. In the function phNxpNciHal_NfcDep_cmd_ext within phNxpNciHal_NfcDepSWPrio.cc, there is an out-of-bounds read caused by a missing bounds check, enabling local information disclosure and potential system-level code execut...

CVE-2020-0178

CVE-2020-0178 affects Android 10, specifically the SettingsProvider.cpp getAllConfigFlags function. The root cause is a missing permission check that enables a possible illegal read, leading to local information disclosure of configuration flags without extra execution privileges. Exploitation de...

CVE-2020-0194

CVE-2020-0194 is an Android 10 vulnerability in the Media Framework (ihevcd_parse_slice_header.c) where an integer overflow can cause an out-of-bounds write, enabling remote code execution and requiring user interaction to exploit. Public references from NVD/Red Hat/CNVD corroborate the descripti...

CVE-2020-0195

CVE-2020-0195 affects Google's Android Media Framework (Android 10). The vulnerability is an information disclosure in the HEVC/ivant recon CTB path (ihevcd_iquant_itrans_recon_ctb.c and related) caused by uninitialized data, potentially allowing remote information disclosure with no execution pr...

CVE-2020-0199

CVE-2020-0199 affects Android 10 with a race-condition in TimeCheck.cpp TimeCheckThread::threadLoop that can cause use-after-free and local information disclosure, potentially gaining system privileges. The description specifies no user interaction required. Connected sources repeat the same deta...

CVE-2020-0204

CVE-2020-0204 affects Android 10 with a flaw in InstallPackage (package.cpp) that allows bypassing the initial signature check for an OS update due to a Time of Check/Time of Use condition. This can enable local escalation of privilege, with no additional execution privileges required beyond user...

CVE-2020-0218

CVE-2020-0218 affects Android 10, describing a race-condition in loadSoundModel and related code in SoundTriggerHwService.cpp that can cause an out-of-bounds write. This leads to local elevation of privilege with no additional execution privileges required; exploitation reportedly requires no use...

CVE-2020-0234

CVE-2020-0234 affects the Android kernel audio component (kernel driver for msm-cirrus playback). The issue is in crus_afe_get_param in msm-cirrus-playback.c, where a missing bounds check allows an out-of-bounds write. This can enable local privilege escalation with no extra privileges and no use...

CVE-2020-0280

CVE-2020-0280 affects Android 11 and is caused by an out-of-bounds read in nci_proc_ee_management_rsp of nci_hrcv.cc due to a missing bounds check. This can lead to local information disclosure with no additional execution privileges; exploitation requires user interaction. The documentation does...

CVE-2020-0281

CVE-2020-0281 describes an NFC-related out-of-bounds read in Android 11 that could enable remote information disclosure due to a missing bounds check. The issue affects NFC handling and is listed with a root cause of insufficient bounds checking, leading to a potential information leak. Reported ...

CVE-2020-0284

CVE-2020-0284 affects Android 11 Telephony where a missing permission check enables a local permission bypass that can lead to information disclosure without extra execution privileges. Exploitation details are not provided in the supplied documents. The issue is listed across multiple feeds (e.g...

CVE-2020-0292

CVE-2020-0292 affects Android 11 via a Bluetooth vulnerability described as an out-of-bounds read caused by a missing bounds check. The issue could allow local information disclosure with System privileges and may require a compromised firmware; no user interaction is needed. The description conf...

CVE-2020-0304

CVE-2020-0304 affects Android 11; a flaw in Settings allows an unsafe PendingIntent to bypass permission, leading to local information disclosure with no user interaction. The root cause is inadequate validation of PendingIntent handlers, enabling a local attacker with physical or remote access t...

CVE-2020-0319

CVE-2020-0319 is an Android 11 NFC stack vulnerability caused by a missing bounds check that enables an out-of-bounds write, leading to local elevation of privilege with system execution privileges and potential firmware compromise. Exploitation requires user interaction. CVSS v3.1 base score 7.8...

CVE-2020-0324

Summary: CVE-2020-0324 affects Android 11 via the libsonivox component, where a missing bounds check can cause an out-of-bounds read. This leads to potential remote information disclosure without execution privileges, with user interaction required to exploit. Evidence from provided documents: Th...

CVE-2020-0331

CVE-2020-0331 affects Android 11, describing a permissions bypass in Settings that can lead to local disclosure of the device IMEI. Exploitation is local, with low attack complexity, requiring LOW privileges and no user interaction. The issue is documented across multiple sources (NVD, Red Hat, P...

CVE-2020-0348

CVE-2020-0348 affects Android 11 and is tied to the NFC subsystem. The issue is an out-of-bounds read caused by a missing bounds check, potentially enabling remote information disclosure over NFC without user interaction (as per the NVD/Red Hat/CNVD entries). The vulnerability is associated with ...

CVE-2020-0353

CVE-2020-0353 affects Android 11 and is tied to the libmp4extractor component. The issue is a missing bounds check that can cause resource exhaustion, leading to a remote Denial of Service without requiring additional privileges. Exploitation requires user interaction. The vulnerability is docume...

CVE-2020-0355

CVE-2020-0355 affects libFraunhoferAAC in Android 11. It is an out-of-bounds read due to a missing bounds check, enabling remote information disclosure with no execution privileges. Exploitation requires user interaction. The issue is documented across multiple sources (NVD, RH, NCSC) and is list...

CVE-2020-0374

CVE-2020-0374 concerns Android 11/NFC where an unsafe PendingIntent can bypass a permission, enabling local elevation of privilege with user rights granted to the attacker. Affected component is the NFC handling path; attack requires local access and does not require user interaction according to...

CVE-2020-0375

CVE-2020-0375 pertains to Android 11 Telephony: a missing permission check enables local escalation of privilege, allowing an attacker to influence EUICC country settings without extra privileges or user interaction. Several connected sources corroborate: Red Hat and CNVD entries describe a Telep...

CVE-2020-0480

CVE-2020-0480 affects Android 11 in the Framework: DocumentsProvider.java allows a local escalation of privilege due to a missing permission check in callUnchecked. The issue enables a caller to copy, move, or delete files accessible to DocumentsProvider without extra execution privileges. Exploi...

CVE-2020-10836

CVE-2020-10836 affects Samsung mobile devices with Exynos (O(8.x), P(9.0), Q(10.0)). The Widevine Trustlet permits read/write access to arbitrary memory, indicating a memory-safety/Trustlet isolation flaw. CVSSv3.1 base score 9.8 (CRITICAL); access is network-based with no authentication required...

CVE-2020-10851

CVE-2020-10851 affects Samsung mobile devices running P (9.0) and Q (10.0) software. The issue is a stack overflow in the kperfmon driver, leading to potentially code execution or instability as described in the public CVE entry. Connected sources reiterate the same root cause but do not provide ...

CVE-2020-25052

CVE-2020-25052 affects Samsung mobile devices running Q(10.0) on exynos9830-based hardware. The issue arises in H-Arx where indexing is mishandled, enabling memory corruption that can be leveraged to execute arbitrary code or cause a denial of service. The vulnerability is documented across multi...

CVE-2020-25053

CVE-2020-25053 affects Samsung mobile devices running Android Q (10.0) on Exynos9830. Root cause: RKP permits arbitrary code execution. Impact: remote code execution with high severity (CVSS v3.1 base 9.8, network access, no user interaction). Exploitation details are not provided in the document...

CVE-2020-25280

CVE-2020-25280 affects Samsung mobile devices running Android Q (10.0) on Exynos and MediaTek chipsets. Unauthenticated attackers could send a USB debugging command to execute LTE/5G commands, with impact to confidentiality, integrity, and availability listed as high in CVSS 3.1 (PHYSICAL access,...

CVE-2020-25281

The CVE-2020-25281 entry concerns LG mobile devices running Android 7.x–8.1 where apps with sensitive security settings (e.g., the package verifier) mishandle unknown-source installations. Affected component/function relates to the installation pipeline for unknown sources. Underlying impact stat...

CVE-2020-27021

CVE-2020-27021 is an Android 11 vulnerability documented in the Pixel security bulletin under the System component with type “ID” (Information disclosure) and moderate severity. The issue is described elsewhere as an out-of-bounds read in avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, enabling loc...

CVE-2020-27029

CVE-2020-27029 affects Android 11 TextView. In TextView.java, improper input validation can cause an app hang, enabling a remote denial of service with no extra privileges. Exploitation requires user interaction. CVSS metrics indicate a base CVSS v3.1 score of 6.5 (Network, Low attack complexity,...

CVE-2020-27034

CVE-2020-27034 affects Android 11 in the SimSelectNotification path. The issue arises in createSimSelectNotification due to an unsafe PendingIntent, enabling a permission bypass that can lead to local information disclosure with the attacker obtaining user privileges. The advisory describes user ...

CVE-2020-27047

CVE-2020-27047 affects the Android ce_t4t_update_binary in ce_t4t.cc. A missing bounds check causes a potential out-of-bounds read, enabling local information disclosure with no full execution privileges. Exploitation requires user interaction. The connected documents do not specify affected prod...

CVE-2020-27048

CVE-2020-27048 affects Android 11 and targets the RW_SendRawFrame path in rw_main.cc, where a missing bounds check allows an out-of-bounds write. This can lead to local escalation of privilege with no extra execution privileges required, and exploitation requires user interaction. The issue is li...

CVE-2020-27057

CVE-2020-27057 affects Android 11 and is described as a permission bypass in GpuService.cpp: getGpuStatsGlobalInfo and getGpuStatsAppInfo, where a missing permission check could allow local disclosure of GPU statistics with user privileges and without user interaction. Exploitation details are no...

CVE-2021-0369

CVE-2021-0369 is linked to CrossProfileAppsServiceImpl.java in Android 11, where a logic error can cause an application’s INTERACT_ACROSS_PROFILES grant state to be displayed incorrectly in Settings UI, enabling local privilege escalation. The exploitation requires user interaction, and the issue...

CVE-2021-0407

CVE-2021-0407 affects the clk driver, with an out-of-bounds write caused by an incorrect bounds check. This can lead to local escalation of privilege with System execution privileges needed; exploitation reportedly requires no user interaction. Public references indicate a patch ID ALPS05479659 (...

CVE-2021-0411

CVE-2021-0411 affects the MediaTek flv extractor. The vulnerability is an out-of-bounds read caused by an integer overflow in the component, enabling local information disclosure without additional execution privileges or user interaction. Mitigation/patch reference: ALPS05561362 (Issue ID ALPS05...

CVE-2021-0418

CVE-2021-0418 concerns the Mediatek memory management driver, where improper input validation can cause a local system crash leading to denial of service without user interaction. The issue is described across multiple sources (NVD, Red Hat) with the same core weakness. The patch reference provid...

CVE-2021-0422

CVE-2021-0422 concerns the memory management driver in MediaTek-based systems. The issue is a missing bounds check that can cause a system crash, enabling local denial of service without requiring user interaction. Multiple documents confirm the root cause and the potential impact (local DoS, hig...

CVE-2021-0461

CVE-2021-0461 (Android kernel, iaxxx-core sensor) : The issue arises in iaxxx_core_sensor_change_state within iaxxx-module.c, where a missing bounds check can cause an out-of-bounds write. This leads to local escalation of privilege with System execution privileges required, and exploitation does...

CVE-2021-0488

CVE-2021-0488 affects Android with an out-of-bounds write in the nanopb-related code path (pb_write in pb_encode.c) due to a missing bounds check. The impact is local elevation of privilege, requiring local access and yielding System privileges; user interaction is not needed. Several connected s...

CVE-2021-0618

CVE-2021-0618 affects MediaTek’s ape extractor. The vulnerability is a heap buffer overflow that can enable a local out-of-bounds read leading to information disclosure, with no user interaction required. Patch ID ALPS05561394 addresses the issue. Exploitation details are not provided in the acce...

CVE-2021-0622

CVE-2021-0622 pertains to the asf extractor and involves a heap-based out-of-bounds read that can disclose local information without extra privileges or user interaction. Exploitation is described as local. Patch ID: ALPS05489178; Issue ID: ALPS05561388. Connected sources describe the vulnerabili...

CVE-2021-0667

CVE-2021-0667 describes a memory corruption via a use-after-free in the apusys component. The issue could allow local escalation of privilege with System execution privileges required, and no user interaction is needed. The vulnerability is associated with MediaTek-derived components (patch ID: A...

CVE-2021-25386

Summary: The vulnerability CVE-2021-25386 affects the Samsung libsdffextractor library, specifically the improper input validation in the function sdfffd_parse_chunk_FVER(). This can allow attackers to execute arbitrary code on the mediaextractor process. Affected component: libsdffextractor (pri...

CVE-2021-25396

CVE-2021-25396 affects Samsung devices with NPU firmware prior to SMR MAY-2021 Release 1, where improper input validation enables arbitrary memory writes and code execution. Root cause is input validation weakness in the NPU firmware. Impact per CVSS indicates local access, high confidentiality/i...

CVE-2021-25471

The vulnerability CVE-2021-25471 affects Samsung devices in the Security Mode Command (SMC) processing path where replay protection is missing. This lack of replay attack protection can cause denial of service to mobile network connections and result in battery depletion. Documented impact is tie...

CVE-2021-25472

The CVE-2021-25472 entry concerns an improper access control vulnerability in BluetoothSettingsProvider for Samsung SMR releases. Affected component: BluetoothSettingsProvider prior to SMR Oct-2021 Release 1. Condition: an untrusted application can overwrite certain Bluetooth information due to w...

CVE-2021-25503

CVE-2021-25503 is an improper input validation vulnerability in Samsung HDCP prior to SMR Nov-2021 Release 1 that enables arbitrary code execution. Affected component: HDCP; root cause: input validation weakness. Local attack vector with low complexity and no authentication required (per CVSS). I...