CVE-2019-2143

CVE-2019-2143 affects Android 10, in the libxaac library. The issue is an out-of-bounds read caused by a missing bounds check, leading to potential information disclosure. Exploitation requires user interaction, and the description does not indicate remote execution or other privileges. Connected...

CVE-2019-2153

CVE-2019-2153 affects libxaac in Android 10, where an out-of-bounds read due to a missing bounds check can disclose information. The vulnerability permits information leakage without execution rights, requiring user interaction to exploit. Documented references indicate the issue is part of the A...

CVE-2019-9242

CVE-2019-9242 affects Android 10 NFC, where a missing bounds check can cause an out-of-bounds read and local information disclosure. Exploitation requires user interaction and local access; no public exploit details are provided in the documents. The issue is listed among Android 10 security fixe...

CVE-2019-9265

CVE-2019-9265 affects Android 10 Bluetooth, where an incorrect bounds check enables an out-of-bounds read that could disclose information remotely without extra privileges or user interaction. Documented impact is information disclosure; no exploitation details are provided in the available sourc...

CVE-2019-9280

CVE-2019-9280 affects Android 10 (Framework). The issue is an elevation-of-privilege in the keyguard caused by improper permission checks, enabling a local bypass of the keyguard under limited circumstances. Exploitation requires user execution privileges, but no user interaction is required. Aff...

CVE-2019-9300

CVE-2019-9300 describes a vulnerability in Android 10’s Media Framework (libAACdec) where an integer overflow can trigger an out-of-bounds write, enabling remote code execution. The issue affects Android 10 and is associated with Android’s libAACdec component; the root cause is an out-of-bounds w...

CVE-2019-9308

CVE-2019-9308 affects Android 10’s libAACdec. The root cause is an out-of-bounds write caused by an integer overflow, enabling remote code execution with no privileges and requiring user interaction to exploit. Remediation is via Android 10 security updates; devices with a patch level of 2019-09-...

CVE-2019-9329

CVE-2019-9329 affects Android 10, where a Bluetooth out-of-bounds read can occur due to uninitialized data, enabling remote information disclosure without privileges or user interaction. The affected component is Bluetooth in Android 10 devices; root cause is an out-of-bounds read from uninitiali...

CVE-2019-9348

Summary of CVE-2019-9348 (Android 10, libstagefright) : The vulnerability is a resource exhaustion issue in the Android Media Framework (libstagefright) caused by improper input validation. It could allow a remote denial of service without extra privileges, with user interaction required to explo...

CVE-2019-9351

CVE-2019-9351 affects the Android 10 Framework, specifically a bypass in SyncStatusObserver that allows local information disclosure by failing to enforce a permission check between user profiles. Exploitation is described as requiring no user interaction and provides only local access with parti...

CVE-2019-9366

CVE-2019-9366 affects the Android platform component libSBRdec on Android 10. The issue is an out-of-bounds read caused by a missing bounds check, with the potential for remote information disclosure. Exploitation requires user interaction. The provided connected documents do not specify a fixed ...

CVE-2019-9397

CVE-2019-9397 affects the Bluetooth component in Android 10. The issue is a missing bounds check that can cause a controlled termination, yielding a remote DoS without needing privileges or user interaction. The vulnerability is documented with Android 10 as affected, and remediation is noted in ...

CVE-2019-9399

CVE-2019-9399 affects Android 10 Print Service. Root cause: improper use of cryptography enabling MITM and remote information disclosure without privileges or user interaction. Impact: partial confidentiality loss. Exploit status not detailed in provided docs. Remediation: apply Android 10 securi...

CVE-2019-9409

CVE-2019-9409 affects the Android 10 media processing stack (libhevc). The issue is an information-disclosure vulnerability caused by uninitialized data, enabling remote information disclosure with no execution privileges required. Exploitation requires user interaction. The connected documents r...

CVE-2019-9462

Technical details about CVE-2019-9462 are not available in the provided connected documents. The initial description confirms a Bluetooth out-of-bounds read causing DoS on Android 10, but no product/version specifics or exploitation details are disclosed here. Monitor for updates.

CVE-2019-9475

CVE-2019-9475 corresponds to a local information disclosure in Android 10 via a permissions bypass in /proc/net of the kernel filesystem. The root cause is a privileged bypass that allows reading information without execution privileges, with exploitation requiring local access and no user intera...

CVE-2020-0120

CVE-2020-0120 affects Android 10 in the Media/Camera stack: the vulnerability arises from an out-of-bounds write caused by a heap overflow in QCamera3HWI.cpp (notifyErrorForPendingRequests). This could allow local escalation of privilege without requiring user interaction. The available sources c...

CVE-2020-0137

CVE-2020-0137 is an Elevation of Privilege vulnerability in Android 10 where the code path setIPv6AddrGenMode in NetworkManagementService.java bypasses a required networking permission due to a missing permission check. This could allow a locally authenticated attacker to gain privileges with no ...

CVE-2020-0172

CVE-2020-0172 affects Android 10, where in Parse_art of eas_mdls.c a bounds check is missing, leading to potential resource exhaustion and remote denial of service. The issue requires user interaction for exploitation and is categorized as DoS with a network attack vector (per CVSS data: CVSS v3....

CVE-2020-0174

CVE-2020-0174 affects Android 10, with the Media Framework vulnerability in Parse_ptbl of eas_mdls.c causing resource exhaustion and potential remote denial of service. Exploitation requires user interaction; no explicit exploit details or patch versions are provided in the connected documents. A...

CVE-2020-0185

CVE-2020-0185 affects Android 10, with the vulnerability in avrc_pars_browsing_cmd of avrc_pars_tg.cc. The root cause is a missing bounds check that enables an out-of-bounds read, leading to local information disclosure without extra privileges or user interaction. The issue is listed across mult...

CVE-2020-0186

The CVE-2020-0186 entry concerns an elevation-of-privilege flaw in Android 10 implemented in hal_fd_init (hal_fd.cc), caused by an incorrect bounds check that enables an out-of-bounds write. This could permit local escalation to system privileges with no user interaction required. The vulnerabili...

CVE-2020-0207

CVE-2020-0207 affects Android 10 with an out-of-bounds read in next_marker() in jdmarker.c caused by improper input validation. This can lead to remote information disclosure; exploitation requires user interaction. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) with a ...

CVE-2020-0211

CVE-2020-0211 refers to a vulnerability in Android 10 where an out-of-bounds read in SumCompoundHorizontalTaps within convolve_neon.cc can lead to remote information disclosure. Exploitation requires user interaction per the description. The issue is documented across multiple sources (NVD, RH, C...

CVE-2020-0233

CVE-2020-0233 describes a memory corruption in Android’s kernel due to a use-after-free in main.cpp, enabling local elevation of privilege without extra user interaction. Documented impact: local attacker could escalate privileges; exploitation status is not provided in the sources. Affected comp...

CVE-2020-0320

CVE-2020-0320 affects the Android library libstagefright and is described as a resource exhaustion vulnerability caused by improper input validation. This can lead to remote denial of service with no additional execution privileges required, with exploitation requiring user interaction. The issue...

CVE-2020-0329

CVE-2020-0329 affects the OMX encoder in Android 11. The root cause is an out-of-bounds read caused by invalid input validation, enabling local information disclosure without user interaction or additional privileges. The issue is documented in the Android 11 security release notes and related ad...

CVE-2020-0330

CVE-2020-0330 relates to the Android 11 ecosystem. The affected component is the iorap path, where a memory corruption via a use-after-free condition could be triggered locally. The documented impact is local escalation of privilege and code execution with System privileges, with exploitation not...

CVE-2020-0406

CVE-2020-0406 affects Android 11 via the libmpeg2dec component. The issue is an out-of-bounds write caused by a missing bounds check in libmpeg2dec, enabling local privilege escalation if triggered with certain parameters; exploitation requires user interaction and does not require prior executio...

CVE-2020-0488

CVE-2020-0488 affects Android 11 on Pixel devices, with a vulnerability in the media processing path: in ihevc_inter_pred_chroma_copy_ssse3 (file ihevc_inter_pred_filters_ssse3_intr.c), uninitialized data can cause information disclosure. Impact is partial confidentiality loss, remote information...

CVE-2020-10847

CVE-2020-10847 affects Samsung mobile devices running P(9.0) on Galaxy S8 and Note8, where the facial recognition system can be spoofed. The core issue is a vulnerability in biometric authentication allowing an attacker to bypass security controls. The connected Red Hat and NVD entries confirm th...

CVE-2020-10851

CVE-2020-10851 affects Samsung mobile devices running P (9.0) and Q (10.0) software. The issue is a stack overflow in the kperfmon driver, leading to potentially code execution or instability as described in the public CVE entry. Connected sources reiterate the same root cause but do not provide ...

CVE-2020-11601

CVE-2020-11601 affects Samsung mobile devices running P (9.0) and Q (10.0). The issue enables unauthorized access to applications in the Secure Folder via floating icons. Connected sources corroborate the Secure Folder access problem (Samsung ID SVE-2019-16195). No concrete root cause, affected c...

CVE-2020-15577

Samsung mobile devices running P (9.0) and Q (10.0) software are affected by CVE-2020-15577 via the Cameralyzer component, which can write files to the SD card. Root cause: Cameralyzer ability to write to external storage leads to unauthorized file writes. Impact: potential modification or insert...

CVE-2020-25046

CVE-2020-25046 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue is in the USB driver where address information is leaked via kernel logging. Root cause is the USB driver handling/logging that exposes kernel address data; impact reportedly includes partial confidential...

CVE-2020-25280

CVE-2020-25280 affects Samsung mobile devices running Android Q (10.0) on Exynos and MediaTek chipsets. Unauthenticated attackers could send a USB debugging command to execute LTE/5G commands, with impact to confidentiality, integrity, and availability listed as high in CVSS 3.1 (PHYSICAL access,...

CVE-2020-27027

CVE-2020-27027: In the NFC code path, specifically in nfc_ncif_proc_get_routing of nfc_ncif.cc, an out-of-bounds read due to a missing bounds check is described as enabling local information disclosure without requiring user interaction. The Android-11 reference in the initial entry is supported ...

CVE-2020-27043

CVE-2020-27043 refers to an out-of-bounds read in the Android NFC stack. Specifically, the issue is described in nfc_enabled of nfc_main.cc, caused by an incorrect increment, leading to possible local information disclosure when firmware runs with system privileges. Affected product is Android 11...

CVE-2021-0409

CVE-2021-0409 affects the MediaTek flv extractor, where an out-of-bounds read can occur due to an incorrect bounds check. This may lead to local information disclosure without requiring user interaction. The issue is documented with patch ID ALPS05561359 / Issue ID ALPS05561359. Connected sources...

CVE-2021-0465

CVE-2021-0465 affects the Android kernel component used by Pixel devices, specifically the GenerateFaceMask function in face.cc. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local escalation of privilege with no extra execution privileges required and no user ...

CVE-2021-0612

CVE-2021-0612 describes a memory corruption in the m4u component, caused by a use-after-free, enabling local escalation of privilege with system execution privileges required. Exploitation reportedly does not require user interaction. Affected context is Mediatek-based hardware; patch ALPS0540349...

CVE-2021-0634

CVE-2021-0634 affects MediaTek’s display driver; vulnerability arises from memory corruption due to uninitialized data, enabling local privilege escalation to SYSTEM with no user interaction. Connected sources (Red Hat, NVD, CVE records) confirm the issue and reference patch ALPS05594994 (Issue A...

CVE-2021-0667

CVE-2021-0667 describes a memory corruption via a use-after-free in the apusys component. The issue could allow local escalation of privilege with System execution privileges required, and no user interaction is needed. The vulnerability is associated with MediaTek-derived components (patch ID: A...

CVE-2021-25386

Summary: The vulnerability CVE-2021-25386 affects the Samsung libsdffextractor library, specifically the improper input validation in the function sdfffd_parse_chunk_FVER(). This can allow attackers to execute arbitrary code on the mediaextractor process. Affected component: libsdffextractor (pri...

CVE-2021-25389

Samsung CVE-2021-25389 affects S Secure prior to SMR MAY-2021 Release 1, due to an improper running task check that could allow a user to access a locked app without authentication. Affected: Samsung devices running S Secure; Root cause: faulty task-check logic. Impact: partial confidentiality an...

CVE-2021-25491

CVE-2021-25491 affects the Samsung mfc driver. The root cause is a NULL-pointer dereference that can cause memory corruption in versions prior to Samsung SMR Oct-2021 Release 1. Public data indicates impact on memory handling, with CVSS details showing low to medium base severity depending on met...

CVE-2022-47496

The CVE-2022-47496 entry relates to the soter service and describes a missing bounds check that enables an out-of-bounds write. This can cause local denial of service with System-level privileges. Exploitation details are not provided in the documents. Multiple connected sources (Red Hat, NVD, PR...

CVE-2022-48245

CVE-2022-48245 concerns the UNISOC audio service. Public records describe a missing permission check in the audio service, enabling local privilege escalation with no additional execution privileges. CVSSv3.1 base metrics cited are AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.8 (HIGH). Affec...

CVE-2022-48387

The CVE-2022-48387 issue affects the apipe driver (notably in UNISOC chipsets), caused by a missing bounds check that enables an out-of-bounds write. This leads to local denial of service with System execution privileges required. Publicly detailed exploit information, affected versions, and conc...

CVE-2022-48442

CVE-2022-48442 affects the dialer service with a missing permission check, enabling local denial of service with no extra privileges. The connected sources consistently describe this impact, but do not provide concrete exploit details or remediation (no patch/version information is present in the...