CVE-2020-10838

Samsung mobile devices running P(9.0) and Q(10.0) are affected by CVE-2020-10838 in the PROCA component, which allows a use-after-free and arbitrary code execution. Samsung ID SVE-2019-16132 is referenced. Details indicate local exploitation with low prerequisites and high impact on confidentiali...

CVE-2020-10839

CVE-2020-10839 affects Samsung mobile devices running Android O (8.x), P (9.0), and Q (10.0), where attackers can bypass Factory Reset Protection (FRP) via a SIM card. The vulnerability is associated with Samsung ID SVE-2019-16193 (Feb 2020). Public references in connected sources reiterate the F...

CVE-2020-10842

The CVE-2020-10842 issue affects Samsung mobile devices on O(8.x), P(9.0), and Q(10.0) using S.LSI chipsets. A heap out-of-bounds write in the tsmux driver is identified as the root cause. Impact is described in CVSS terms as high for confidentiality, integrity, and availability (local exploit, l...

CVE-2020-10847

CVE-2020-10847 affects Samsung mobile devices running P(9.0) on Galaxy S8 and Note8, where the facial recognition system can be spoofed. The core issue is a vulnerability in biometric authentication allowing an attacker to bypass security controls. The connected Red Hat and NVD entries confirm th...

CVE-2020-10852

CVE-2020-10852 involves a stack overflow in the display driver affecting Samsung mobile devices running O(8.x), P(9.0), and Q(10.0) software (Samsung ID SVE-2019-15877). The Red Hat/EUVD/CNVD entries corroborate the same issue. According to the NVD metrics, CVSS v3.1 base score is 7.8 (HIGH) with...

CVE-2020-11601

CVE-2020-11601 affects Samsung mobile devices running P (9.0) and Q (10.0). The issue enables unauthorized access to applications in the Secure Folder via floating icons. Connected sources corroborate the Secure Folder access problem (Samsung ID SVE-2019-16195). No concrete root cause, affected c...

CVE-2020-15579

CVE-2020-15579 describes a FRP bypass on Samsung mobile devices running O(8.x), P(9.0) and Q(10.0) via the KNOX API (Samsung ID SVE-2020-17318). Documents consistently identify FRP bypass as the issue; no concrete exploit technique, affected model list, or fixed version is provided in the sources...

CVE-2020-25046

CVE-2020-25046 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue is in the USB driver where address information is leaked via kernel logging. Root cause is the USB driver handling/logging that exposes kernel address data; impact reportedly includes partial confidential...

CVE-2020-27023

CVE-2020-27023 affects Android 11 where in BluetoothMediaBrowserService.java the setErrorPlaybackState path allows a permission bypass via an unsafe PendingIntent. This could lead to local information disclosure with System-level privileges (no user interaction required per the report). CVSS metr...

CVE-2020-27041

In CVE-2020-27041, the issue is in Android 11’s ConnectivityService.java showProvisioningNotification where an unsafe PendingIntent could allow local information disclosure of notification data without extra privileges or user interaction. The vulnerability is a local disclosure due to PendingInt...

CVE-2020-27049

Summary (CVE-2020-27049) : The issue lies in Android’s rw_t3t_send_raw_frame (rw_t3t.cc). A missing bounds check causes an out-of-bounds write in the T3T (Type 3 Tag) handling path, enabling local escalation of privilege with no additional execution privileges, and requiring user interaction to e...

CVE-2020-27052

CVE-2020-27052 concerns Android 11 where in ActivityRecord.java, the getLockTaskLaunchMode path allows any app to start in Lock Task Mode via a permissions bypass. The documented impact is local elevation of privilege without additional execution privileges or user interaction. Connected sources ...

CVE-2021-0371

Summary: CVE-2021-0371 is an Android elevation-of-privilege issue. The flaw is in the function nci_proc_rf_management_ntf within nci_hrcv.cc , where an out-of-bounds read can occur due to a missing bounds check. This could enable local privilege escalation to System level without user interaction...

CVE-2021-0378

CVE-2021-0378 is a heap-based out-of-bounds read in pvmp3_getbits.cpp:getNbits affecting Android 11 (Media framework). The vulnerability permits remote information disclosure without extra execution privileges; exploitation requires user interaction per the NVD entry. CVSS details: CVSS v3.1 base...

CVE-2021-0407

CVE-2021-0407 affects the clk driver, with an out-of-bounds write caused by an incorrect bounds check. This can lead to local escalation of privilege with System execution privileges needed; exploitation reportedly requires no user interaction. Public references indicate a patch ID ALPS05479659 (...

CVE-2021-0411

CVE-2021-0411 affects the MediaTek flv extractor. The vulnerability is an out-of-bounds read caused by an integer overflow in the component, enabling local information disclosure without additional execution privileges or user interaction. Mitigation/patch reference: ALPS05561362 (Issue ID ALPS05...

CVE-2021-0424

The CVE-2021-0424 entry concerns a Mediatek device where the in memory management driver has a missing bounds check, enabling a local denial-of-service due to a system crash. Exploitation requires local access with no user interaction. The patch reference is ALPS05403499 (Issue ALPS05393787). Con...

CVE-2021-0425

CVE-2021-0425 relates to a side-channel information disclosure in the memory management driver, enabling local information disclosure without user interaction. The vulnerability affects the memory-management component and is tied to the Mediatek ecosystem per linked advisories. The root cause is ...

CVE-2021-0465

CVE-2021-0465 affects the Android kernel component used by Pixel devices, specifically the GenerateFaceMask function in face.cc. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local escalation of privilege with no extra execution privileges required and no user ...

CVE-2021-0618

CVE-2021-0618 affects MediaTek’s ape extractor. The vulnerability is a heap buffer overflow that can enable a local out-of-bounds read leading to information disclosure, with no user interaction required. Patch ID ALPS05561394 addresses the issue. Exploitation details are not provided in the acce...

CVE-2021-0621

In the asf extractor component, CVE-2021-0621 describes a possible out-of-bounds read caused by an integer overflow. This could lead to local information disclosure without requiring user interaction or additional execution privileges. A patch is available (ALPS05489178; ALPS05561383). The issue ...

CVE-2021-0622

CVE-2021-0622 pertains to the asf extractor and involves a heap-based out-of-bounds read that can disclose local information without extra privileges or user interaction. Exploitation is described as local. Patch ID: ALPS05489178; Issue ID: ALPS05561388. Connected sources describe the vulnerabili...

CVE-2021-0634

CVE-2021-0634 affects MediaTek’s display driver; vulnerability arises from memory corruption due to uninitialized data, enabling local privilege escalation to SYSTEM with no user interaction. Connected sources (Red Hat, NVD, CVE records) confirm the issue and reference patch ALPS05594994 (Issue A...

CVE-2021-0901

The CVE-2021-0901 issue affects MediaTek Apusys (chipset component). It describes a memory corruption vulnerability caused by a missing bounds check in apusys, enabling local privilege escalation with System execution privileges required and no user interaction needed. Affected state and impact a...

CVE-2021-25407

Summary (CVE-2021-25407) : A vulnerability in Samsung’s NPU driver (pre-SMR JUN-2021 Release 1) enables an out-of-bounds write, allowing arbitrary memory writes. The issue is rooted in the NPU driver and affects devices using the affected firmware. Publicly disclosed data indicate potential impac...

CVE-2021-25412

The CVE-2021-25412 entry concerns an improper access control flaw in genericssoservice before Samsung SMR JUN-2021 Release 1. The vulnerability enables local attackers to perform protected activities with system privileges via untrusted applications, due to insufficient access restrictions on sen...

CVE-2022-38685

CVE-2022-38685 affects UNISOC chipsets’ Bluetooth service module, where a missing privilege check in the Bluetooth service could allow local denial of service without extra execution privileges. The issue is documented across multiple sources (NVD/NVD mirror and related catalogs) with this root c...

CVE-2022-39090

CVE-2022-39090 involves a missing permission check in the system’s power management service. The root cause is a lack of authorization in setting up the power management service, potentially allowing initial setup with no additional execution privileges. The CVSS vector from NVD indicates a Local...

CVE-2022-47499

CVE-2022-47499 affects the soter service in UNISOC chipsets, with the root cause being a missing bounds check that enables an out-of-bounds write. This can lead to local denial of service with SYSTEM privileges required. The issue is documented across multiple sources (NVD/Red Hat PRION/CVE lists...

CVE-2022-48446

The CVE-2022-48446 entry describes a vulnerability in the telephony service where a missing permission check can lead to local denial of service without requiring extra privileges. Reports from multiple sources (NVD, Red Hat, PRION, CVE lists, and vulnerability enrichments) consistently state the...

CVE-2022-48463

CVE-2022-48463 affects the wifi service with a missing bounds check that enables an out-of-bounds write. This can lead to local denial of service without extra privileges (CVSS: LOCAL, LOW attack complexity, ALLOWs LOCAL access; impact is Availability HIGH). No concrete fixes or affected versions...

CVE-2023-20759

In cmdq, a memory corruption flaw is caused by a missing bounds check, potentially enabling local denial of service with SYSTEM privileges. Exploitation does not require user interaction. A patch is available (Patch ID: ALPS07636133; Issue ID: ALPS07634601).

CVE-2023-20772

CVE-2023-20772 affects the vow component, where a missing permission check enables local escalation of privilege without requiring user interaction. The issue can be exploited locally to gain higher privileges, as indicated by the CVSS data (LOCAL vector, high confidentiality/integrity/availabili...

CVE-2023-20807

CVE-2023-20807 affects MediaTek’s dpe component, where a missing bounds check enables an out-of-bounds write. This is described as a local escalation of privilege with System execution privileges required, and no user interaction is needed for exploitation. The issue is associated with the dpe mo...

CVE-2023-20814

The CVE-2023-20814 issue is described as an out-of-bounds write in the MediaTek WLAN service caused by improper input validation, enabling local escalation to SYSTEM with no user interaction. Affected software is MediaTek WLAN components; root cause is a buffer/bounds check failure. Impact is loc...

CVE-2023-21260

CVE-2023-21260 affects Android Automotive OS (AAOS) Packages component. A malicious app can exploit the notification access permission dialog by embedding an excessively long service label that can overflow the user prompt and display misleading information as a system message for user confirmati...

CVE-2023-30917

CVE-2023-30917 affects DMService in Unisoc chipsets (e.g., SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T618, etc.) due to a missing permission check, enabling local privilege escalation with no additional privileges. NVD data shows CVSS v3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base...

CVE-2023-30923

CVE-2023-30923 involves a missing permission check in the messaging service, enabling local information disclosure without requiring any additional execution privileges. The available sources describe the vulnerability at the component level (messaging service) and the impact (local information d...

CVE-2023-30925

CVE-2023-30925 describes a missing permission check in the opm service that can cause local information disclosure without requiring extra privileges. Multiple sources (including NVD and Red Hat) confirm the issue and its impact, with a CVSSv3.1 base score of 5.5 (Local access, Confidentiality im...

CVE-2023-30929

CVE-2023-30929 describes a local privilege escalation in the telephony service due to a missing permission check. Connected sources link this to UNISOC chipset telephony implementations (e.g., SC98xx/SC77xx/T610 and related models) and similar Red Hat/NVD entries reiterate the local-privilege imp...

CVE-2023-30937

CVE-2023-30937 describes a missing permission check in the telephony service that could allow local information disclosure with no extra privileges. Documents confirm this flaw affects the telephony component (noted in Red Hat/NVD records) and is associated with UNISOC chipsets/telephony implemen...

CVE-2023-32859

CVE-2023-32859 describes a classic buffer overflow in the Meta module (appearing in MediaTek chip context) caused by a missing bounds check. This could enable local escalation to SYSTEM privileges without user interaction. Exploitation details are not provided in the documents. A patch is identif...

CVE-2023-32865

The CVE-2023-32865 issue is in the display drm component (reported across MediaTek-related advisories and Red Hat advisories). It stems from an incorrect bounds check that enables an out-of-bounds write, potentially allowing local escalation of privilege with SYSTEM execution privileges. Exploita...

CVE-2023-32870

CVE-2023-32870 affects the display drm module (MediaTek context from multiple sources). The vulnerability is caused by a missing bounds check, leading to an out-of-bounds read. Implications are local escalation of privilege with SYSTEM-level execution required; exploitation does not require user ...

CVE-2023-33882

CVE-2023-33882 involves a missing permission check in the telephony service that could cause local information disclosure without additional privileges. Connected sources consistently describe a local-impact vulnerability with HIGH confidentiality impact and a CVSS‑3.1 base score of 5.5 (LOCAL, L...

CVE-2023-33890

CVE-2023-33890 concerns a missing permission check in the telephony service, enabling local information disclosure without extra privileges. Multiple sources (including UNISOC-related disclosures) consistently attribute the issue to the telephony component, with an attack vector classified as LOC...

CVE-2023-33895

CVE-2023-33895 affects the fastDial service. The root cause is a missing permission check which can cause local information disclosure without requiring additional execution privileges. Multiple sources (NVD, Red Hat, CVE lists) describe the impact as local information disclosure; exploitation st...

CVE-2023-38445

In CVE-2023-38445, the vulnerable component is vowifiservice. The root cause is a missing permission check, which could allow local denial of service without additional privileges. The NVD entry assigns a CVSS‑3.1 base score of 5.5 (Local, Low attack complexity, privileges required: Low, impact: ...

CVE-2023-38454

CVE-2023-38454 concerns the vowifi service where a missing permission check could allow local information disclosure with no extra privileges. The vulnerability is described across multiple feeds as affecting vowifi service components, but the connected documents do not provide specific vulnerabl...

CVE-2023-38462

CVE-2023-38462 affects vowifiservice, where a possible missing permission check could allow a local denial-of-service with no additional privileges. The NVD entry lists a CVSSv3.1 base score of 5.5 (Local, Low attack complexity, Privileges Required: Low, Privilege: None for confidentiality/integr...