CVE-2022-47490

CVE-2022-47490 concerns the UNISOC soter service, where a missing permission check is identified as the root cause. The available documents describe this flaw as enabling local denial of service with no additional execution privileges, affecting the soter service in UNISOC chipsets. Exploitation ...

CVE-2022-48232

CVE-2022-48232 concerns UNISOC chipsets’ FM service with a missing parameter check, enabling local denial of service. Connected sources corroborate a local impact; exploitation details are not provided, and there is no publicly available fix information in the supplied documents. Monitor for upda...

CVE-2022-48237

CVE-2022-48237 affects UNISOC chipsets’ Image filter module. The vulnerability is an out-of-bounds write due to a missing bounds check, with impact as local denial of service and SYSTEM privileges required. Public exploitation details are not provided in the connected documents. Remediation/fix s...

CVE-2022-48380

CVE-2022-48380 affects the UNISOC modem control device. The vulnerability is an out-of-bounds write caused by a missing bounds check in the modem control component, enabling local denial of service with SYSTEM-level privileges required. Public exploit details are not provided in the available doc...

CVE-2022-48452

CVE-2022-48452 affects Ifaa service used in UNISOC chipsets. The root cause is a missing permission check, enabling local denial of service with SYSTEM privileges required. Exploitation is described as local (no UI interaction). The CVE entry shows a MEDIUM severity (CVSS v3.1: 4.4) with PRIVILEG...

CVE-2023-20686

CVE-2023-20686 describes a race-condition in the display DRM path that enables a double-free vulnerability, potentially enabling local privilege escalation with SYSTEM privileges. The issue is described consistently across sources (NVD/Red Hat citations) as requiring no user interaction to exploi...

CVE-2023-20750

The CVE-2023-20750 entry concerns the swpm module in MediaTek chips, describing a race-condition that can cause an out-of-bounds write. This could lead to local information disclosure, with system execution privileges needed for exploitation and no user interaction required. Public references not...

CVE-2023-20758

CVE-2023-20758 affects the cmdq component, where a missing bounds check can cause memory corruption. This is described as enabling local denial of service with System execution privileges required, and exploitation does not require user interaction. A patch is listed (ALPS07636133; ALPS07636130)....

CVE-2023-20760

CVE-2023-20760 affects MediaTek devices via the apu component, with an out-of-bounds write caused by a missing bounds check. This can enable local escalation of privilege to System execution level without user interaction. Exploitation details are not provided in the documents, but a patch (ALPS0...

CVE-2023-20771

CVE-2023-20771 involves a memory corruption issue caused by a race condition in the display path, enabling local escalation to SYSTEM privileges with no user interaction. Reported affected MediaTek-based chips include MT6580, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6785, MT8168, and MT8...

CVE-2023-20784

CVE-2023-20784 describes an out-of-bounds write in the keyinstall component due to a missing bounds check, enabling local escalation of privilege with SYSTEM execution privileges required and no user interaction. The vulnerability is associated with MediaTek-based chip environments as per multipl...

CVE-2023-21311

CVE-2023-21311 describes an information-disclosure vulnerability in Android Settings where a permissions bypass could let a secondary user control private DNS settings. Exploitation is local (ATT&CK-like, not remote), requires no user interaction, and could disclose private information without ad...

CVE-2023-30919

The CVE-2023-30919 vulnerability is due to a missing permission check in the messaging service, enabling local information disclosure without requiring additional execution privileges. Public records (NVD, Red Hat, PRION, CVE listing) describe the issue as a local-privilege-context information ex...

CVE-2023-32805

CVE-2023-32805 concerns an out-of-bounds write in MediaTek power-related components due to an insecure default value, enabling local privilege escalation with System execution privileges. Exploitation is described as requiring user interaction; affected details include the need for a patch (ALPS0...

CVE-2023-32854

CVE-2023-32854 affects MediaTek devices via the ril module, with an out-of-bounds write caused by a missing bounds check. This can enable local escalation of privileges to SYSTEM level without user interaction. Patch: ALPS08240132 (Issue ALPS08240132) is referenced as the remediation. No exploita...

CVE-2023-32867

CVE-2023-32867 affects MediaTek devices via the Display DRM module, where a missing bounds check can cause an out-of-bounds write. This can lead to local privilege escalation to System without user interaction. Patch ID ALPS07560793 (Issue ALPS07560793) is referenced as a fix. Documented impact i...

CVE-2023-32869

The CVE-2023-32869 vulnerability is in the MediaTek Display DRM component and is caused by a missing bounds check, enabling an out-of-bounds write. This could allow local escalation of privilege with System execution privileges, and no user interaction is required for exploitation. Documents cons...

CVE-2023-33883

CVE-2023-33883 involves a missing permission check in the telephony service that could allow local information disclosure without extra execution privileges. Sources consistently describe a local-privilege check omission as the root cause. Affected products include UNISOC chipsets/telephony imple...

CVE-2023-40639

The CVE-2023-40639 issue concerns the SoundRecorder service with a missing permission check that could lead to local information disclosure without requiring additional privileges. Multiple sources (NVD, Red Hat CVE page, CVE lists) confirm the vulnerability description and classify the impact as...

CVE-2023-40646

CVE-2023-40646 affects UNISOC chipsets’ Messaging component where a missing permission check could allow local information disclosure without requiring additional execution privileges. The NVD entry reports a CVSS v3.1 base score of 5.5 (Impact: Confidentiality High; Privileges Required Low; Atta...

CVE-2023-42685

Technical details about CVE-2023-42685 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2023-42724

CVE-2023-42724 concerns an out-of-bounds read in the GPU driver that could enable local denial of service with system execution privileges. Public details consistently describe the flaw as a bounds-check failure in the GPU driver, with patched mitigations referenced by Apple for iOS/iPadOS. Explo...

CVE-2023-48358

CVE-2023-48358 is an out-of-bounds write in the DRM driver caused by a missing bounds check, leading to local denial of service with SYSTEM privileges. Affected component: DRM driver (noted in Red Hat/NVD records; associated with Unisoc chipsets per CNNVD). CVSS v3.1 metrics indicate a MEDIUM bas...

CVE-2024-43766

CVE-2024-43766 describes an information-disclosure vulnerability in the Android Bluetooth stack caused by invalid error handling in multiple functions of a file named btm_ble_sec.cc . The issue could enable remote information disclosure to a proximal/adjacent attacker with no additional execution...

CVE-2024-49731

CVE-2024-49731 affects Wear OS on Pixel Watch during setup, where a logic error in apk-versions.txt can corrupt telemetry opt-in settings on other watches. Impact stated: local privilege escalation without additional execution privileges; user interaction is required to exploit. Documents consist...

CVE-2025-36902

In CVE-2025-36902, the vulnerable component is syna_tcm2_sysfs.c, specifically the syna_cdev_ioctl_store_pid() function. It reports a heap buffer overflow causing an out-of-bounds write, which could enable local escalation of privilege with System execution privileges required. Exploitation requi...

CVE-2025-48558

CVE-2025-48558 affects the Android BatteryService.java component, where multiple functions could enable implicit intent hijacking of a system app. This yields local elevation of privilege without extra privileges or user interaction. The connected documents confirm the vulnerability type and impa...

CVE-2026-0098

Technical details (affected products, versions, exploit specifics, or mitigations) are not publicly available in the provided documents. Monitor for updates and rely on official advisories when they are published.

CVE-2026-0162

Technical details for CVE-2026-0162 are not publicly provided in the connected documents. The available descriptions only indicate a memory corruption in AudioSdpParser.cpp potentially enabling remote code execution. Monitor for updates and additional technical disclosures.

CVE-2014-9782

The CVE-2014-9782 issue concerns Qualcomm MSM camera actuator code (drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c) in Android on Nexus 5/7 (2013) devices. The root cause is lack of validation for direction and step parameters, enabling privilege escalation via a crafted app....

CVE-2014-9793

The CVE-2014-9793 issue affects Android on Nexus 7 (2013) devices, where platform/msm_shared/mmc.c in Qualcomm components mishandles the power-on write-protect feature. This can allow a local attacker to escalate privileges via a crafted app. Root cause is a mishandling of write-protect on power-...

CVE-2014-9796

CVE-2014-9796 affects Android on Nexus 5 and Nexus 7 (2013) via the Qualcomm component’s app/aboot/aboot.c, where the kernel header page size is not validated, enabling a crafted boot image to bypass access restrictions. Public details are tied to Android/Qualcomm bug references (28820722, CR6847...

CVE-2014-9891

CVE-2014-9891 affects the Qualcomm qseecom driver (drivers/misc/qseecom.c) in Android on Nexus 5 devices prior to 2016-08-05. The issue arises from not validating certain buffer addresses, allowing a local attacker to escalate privileges via a crafted application that invokes an ioctl call. Impac...

CVE-2014-9963

CVE-2014-9963 describes a buffer overflow in WideVine DRM present in Android CAF builds using the Linux kernel. The connected sources confirm a DRM component buffer overflow, implying potential arbitrary code execution under certain conditions, with CVSS indicating HIGH severity (local access, us...

CVE-2015-9035

CVE-2015-9035 describes a memory-management defect in Qualcomm components used in Android CAF builds on Linux kernels, where a memory buffer is not freed after use, potentially leading to memory exhaustion. Public sources in the connected set (NVD entry, CNVD-2017-26829, CNVD/CVEs and EUVD-2015-8...

CVE-2015-9039

Summary: CVE-2015-9039 affects the Qualcomm eMBMS component in Android CAF builds that use the Linux kernel. The root cause is an assertion that can be reached by a sequence of downlink messages in eMBMS, enabling a potential unauthorized operation. The vulnerability has a high/critical impact pr...

CVE-2015-9046

Technical details about CVE-2015-9046 are not publicly provided in the supplied documents. No specific impact, affected products, or fixes are disclosed here. Monitor for updates.

CVE-2015-9052

CVE-2015-9052 affects Qualcomm components in Android CAF builds using the Linux kernel LTE stack; the issue is an assertion that can be reached while processing a downlink message. The provided documents do not specify affected product versions, exact root cause details, exploit status, or availa...

CVE-2016-0833

Technical details about CVE-2016-0833 are not publicly available in the supplied documents. Monitor for updates from official advisories.

CVE-2016-10231

CVE-2016-10231 is an elevation-of-privilege vulnerability in the Qualcomm sound codec driver affecting the Android kernel. The issue could allow a local attacker with access to the device to execute code with kernel privileges. Public references in the connected records tie it to the Qualcomm sou...

CVE-2016-10232

CVE-2016-10232 is an elevation-of-privil... (shortened to fit)

CVE-2016-10233

CVE-2016-10233 is an elevation of privilege in the Qualcomm video driver affecting the Android kernel. The NVD entry documents a CRITICAL impact with a reported base score of 9.8 (CVSS3) and notes the vulnerability relates to the Qualcomm video driver; references include QC-CR#897452. Connected d...

CVE-2016-2502

CVE-2016-2502 concerns the Qualcomm USB driver in Android (driver file drivers/usb/gadget/f_serial.c). The issue is a privilege-escalation in Nexus 5X/6P due to processing a large GSER_IOCTL size in the GSER_IOCTL call, enabling a local attacker to gain kernel-level privileges. Affected platforms...

CVE-2016-3752

CVE-2016-3752 affects Android 6.x, where internal/app/ChooserActivity.java in the ChooserTarget service mishandles target security checks, enabling a local attacker with a crafted app to escalate privileges. The issue is categorized as an elevation of privilege in the ChooserTarget service. Affec...

CVE-2016-3754

CVE-2016-3754 affects Android Mediaserver: Mediaserver in Android versions 4.x up to 4.4.4, 5.x up to 5.0.2/5.1.x up to 5.1.1, and 6.x up to 2016-07-01 mishandles memory limits for process memory, allowing remote attackers to cause a denial of service (device hang or reboot) by feeding a crafted ...

CVE-2016-3757

CVE-2016-3757 affects Android: the print_maps function in toolbox/lsof.c on Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x before 2016-07-01 allows a user-assisted attacker to gain privileges by a crafted app that lists a long memory-mapped file name (internal bug 28175237...

CVE-2016-3833

The CVE-2016-3833 entry describes a privilege-elevation issue in the Android Shell. The Shell component in Android versions 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGE_USERS and CREATE_USERS permissions, allowing a crafted application to b...

CVE-2016-3848

CVE-2016-3848 corresponds to a race-condition vulnerability in the NVIDIA media driver (kernel nvavp driver) on Android/Nexus 9 prior to 2016-08-05 that could allow a local attacker to escalate privileges via a crafted application. The Android bulletin notes this as an elevation of privilege in t...

CVE-2016-3850

CVE-2016-3850 describes an integer overflow in aboot.c (Qualcomm bootloader) affecting Android devices prior to 2016-08-05, including Nexus 5, 5X, 6P, and 7 (2013). The vulnerability allows privilege escalation via a crafted header field in a boot image. The provided documents do not specify exac...

CVE-2016-3853

CVE-2016-3853 involves Google Play services on Nexus devices. The issue allows a local attacker to bypass Factory Reset Protection and delete data via unspecified vectors (internal bug 26803208). The description in the CVE notes this is an elevation of privilege within Google Play services, not a...