CVE-2020-0159

CVE-2020-0159 involves an out-of-bounds read in rw_mfc_writeBlock (rw_mfc.cc) on Android 10 due to an incorrect bounds check. This can lead to local information disclosure with system privileges required; exploitation reportedly needs user interaction. Affected software is Android 10; remediation...

CVE-2020-0165

CVE-2020-0165 affects Android 10. The issue is a potential out-of-bounds write in phNxpNciHal_NfcDep_cmd_ext (nfc driver code), caused by a missing bounds check, enabling local escalation of privilege with System execution privileges; no user interaction required. CVSSv3.1 base score 6.7 (Local, ...

CVE-2020-0191

CVE-2020-0191 targets Android 10 and is caused by a logic error in ih264d_update_default_index_list() within the Android Media Framework’s H.264 decoder (ih264d_dpb_mgr.c). This results in an out-of-bounds read, enabling potential information disclosure. Exploitation requires user interaction, an...

CVE-2020-0192

CVE-2020-0192 affects Android 10 in the Media Framework. The issue is an out-of-bounds read in ih264d_decode_slice_thread (ih264d_thread_parse_decode.c) caused by improper input validation, enabling remote information disclosure with user interaction required for exploitation. Public references i...

CVE-2020-0285

CVE-2020-0285 affects Android 11 Telephony. The issue is a missing permission check that enables a local information disclosure without requiring additional execution privileges, and does not require user interaction for exploitation. The vulnerability is described consistently across multiple co...

CVE-2020-0291

CVE-2020-0291 affects Android 11 and is described as a Bluetooth out-of-bounds read due to a missing bounds check. It could enable local information disclosure with System execution privileges and does not require user interaction. Exploitation details are not provided in the supplied documents. ...

CVE-2020-0323

CVE-2020-0323 affects the Android 11/libavb stack, where a missing bounds check enables a possible out-of-bounds read that can disclose local information without extra privileges or user interaction. Root cause: improper bounds verification in libavb. Impact: information disclosure (no code execu...

CVE-2020-0337

CVE-2020-0337 affects Android 11 in the MediaProvider component, where a permissions-check bypass can occur due to a confused deputy, enabling local information disclosure without user interaction. Affected product: Android 11 (Android framework). Root cause: flawed permission check leading to in...

CVE-2020-0353

CVE-2020-0353 affects Android 11 and is tied to the libmp4extractor component. The issue is a missing bounds check that can cause resource exhaustion, leading to a remote Denial of Service without requiring additional privileges. Exploitation requires user interaction. The vulnerability is docume...

CVE-2020-0405

CVE-2020-0405 affects Android 11. In the NetworkStackNotifier, an unsafe implicit PendingIntent can bypass permissions, enabling local elevation of privilege with User execution privileges required but no user interaction. Documentation across multiple sources (NVD/Red Hat/CNVD) confirms this vul...

CVE-2020-0434

CVE-2020-0434 relates to Pixel’s use of the Catpipe library, where a use-after-free leads to memory corruption in the Android kernel and enables local privilege escalation without user interaction. The impact is Local Privilege Escalation with high severity (per CVSS), affecting Pixel devices via...

CVE-2020-0492

CVE-2020-0492 affects Android 11 Media framework (BitstreamFillCache in bitstream.cpp). Root cause: out-of-bounds read caused by a heap buffer overflow leading to potential remote information disclosure. Impact: requires no privileges but may require user interaction for exploitation; exposed dat...

CVE-2020-0494

CVE-2020-0494 corresponds to a heap buffer overflow in ih264d_parse_ave (ih264d_sei.c) that can cause an out-of-bounds read and remote information disclosure on Android 11 devices. The vulnerability affects Android 11 Pixel/Android components in the media stack and is described as requiring user ...

CVE-2020-10851

CVE-2020-10851 affects Samsung mobile devices running P (9.0) and Q (10.0) software. The issue is a stack overflow in the kperfmon driver, leading to potentially code execution or instability as described in the public CVE entry. Connected sources reiterate the same root cause but do not provide ...

CVE-2020-25047

CVE-2020-25047 affects Samsung mobile devices on Android P/Q where the S Secure app does not enforce the intended password requirement for a locked application. Root cause: insufficient password enforcement in S Secure. Impact is partial confidentiality and potential access to a locked app; CVE s...

CVE-2020-25049

CVE-2020-25049 affects Samsung mobile devices running P (9.0) and Q (10.0) software, where the StatusBarService has insufficient DEX access control. The vulnerability is documented by NVD as having a high base score (CVSS v3.1: 9.8, NETWORK, NONE user interaction, HIGH confidentiality/integrity/a...

CVE-2020-27025

CVE-2020-27025 affects Android 11 and is caused by an unsafe PendingIntent in EapFailureNotifier.java and SimRequiredNotifier.java, enabling a permission bypass that can lead to local information disclosure. The issue requires no user interaction and could be triggered with local access; the root...

CVE-2021-0423

CVE-2021-0423 concerns an information disclosure in the Mediatek memory management driver due to uninitialized data. This can enable local information disclosure with no additional execution privileges and without user interaction. The vulnerability is documented across multiple sources including...

CVE-2021-25383

The CVE-2021-25383 entry concerns the Samsung libsapeextractor library. Affected component: scmn_mfal_read() in libsapeextractor. Root cause: improper input validation prior to SMR MAY-2021 Release 1. Impact: allows an attacker to execute arbitrary code on the mediaextractor process. Public detai...

CVE-2021-25389

Samsung CVE-2021-25389 affects S Secure prior to SMR MAY-2021 Release 1, due to an improper running task check that could allow a user to access a locked app without authentication. Affected: Samsung devices running S Secure; Root cause: faulty task-check logic. Impact: partial confidentiality an...

CVE-2021-25413

CVE-2021-25413 affects Samsung Contacts prior to SMR June-2021 Release 1. The root cause is improper sanitization of incoming intents, enabling a local attacker to access arbitrary data within the Samsung Contacts privilege. Impact is partial confidentiality exposure of data via a local vector. T...

CVE-2021-25484

The CVE-2021-25484 entry concerns an improper authentication flaw in InputManagerService. Affected component: InputManagerService (Samsung SMR prior to Oct-2021 Release 1). Impact stated: it allows monitoring the touch event. Documented references indicate a Samsung security update (securityUpdat...

CVE-2022-47352

The CVE-2022-47352 entry concerns the camera driver in Unisoc chipsets, where a missing bounds check allows an out-of-bounds read. This is described across Red Hat/NVD/CVE records as enabling possible local denial of service with SYSTEM-level execution required. Affected component is the camera d...

CVE-2022-47499

CVE-2022-47499 affects the soter service in UNISOC chipsets, with the root cause being a missing bounds check that enables an out-of-bounds write. This can lead to local denial of service with SYSTEM privileges required. The issue is documented across multiple sources (NVD/Red Hat PRION/CVE lists...

CVE-2022-48385

CVE-2022-48385 affects the UNISOC chipsets cp_dump driver. The vulnerability is an out-of-bounds write caused by a missing bounds check, leading to local denial of service with System execution privileges required. The CVSS/metrics indicate LOCAL access, HIGH privileges, no user interaction, and ...

CVE-2022-48389

CVE-2022-48389 affects the modem control device in Unisoc chipsets. Root cause: a missing bounds check enables an out-of-bounds write. Impact: local denial of service with SYSTEM privileges (high-impact write, per CVSS 3.1 vector). Exploitation details are not provided in the connected documents;...

CVE-2022-48446

The CVE-2022-48446 entry describes a vulnerability in the telephony service where a missing permission check can lead to local denial of service without requiring extra privileges. Reports from multiple sources (NVD, Red Hat, PRION, CVE lists, and vulnerability enrichments) consistently state the...

CVE-2023-21231

CVE-2023-21231 is a Wear OS/Android framework issue where getIntentForButton in ButtonManager.java fails to perform a necessary permission check, allowing an unprivileged app to start a non-exported or permission-protected activity. This yields local escalation of privilege with no extra executio...

CVE-2023-21345

CVE-2023-21345 is described as an information-disclosure issue in Android’s Game Manager Service where an attacker can determine if an app is installed without query permissions via a side-channel. The available documents indicate local exploitation with no user interaction and a low overall risk...

CVE-2023-30865

CVE-2023-30865 affects the dialer service where a missing permission check can allow local information disclosure without extra privileges. The common description across sources states the root cause is inadequate permission verification, enabling disclosure with low attack complexity and local a...

CVE-2023-30942

CVE-2023-30942 is described across multiple connected feeds as a vulnerability in a telephony service where a missing permission check can lead to local information disclosure without requiring extra execution privileges. Reported impact is local disclosure (confidentiality) with no exploitation ...

CVE-2023-32789

CVE-2023-32789 concerns a missing permission check in the telephony service that enables local information disclosure without additional execution privileges. The core issue is a privilege check gap in the telephony component, with CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N indicating local acc...

CVE-2023-32859

CVE-2023-32859 describes a classic buffer overflow in the Meta module (appearing in MediaTek chip context) caused by a missing bounds check. This could enable local escalation to SYSTEM privileges without user interaction. Exploitation details are not provided in the documents. A patch is identif...

CVE-2023-32867

CVE-2023-32867 affects MediaTek devices via the Display DRM module, where a missing bounds check can cause an out-of-bounds write. This can lead to local privilege escalation to System without user interaction. Patch ID ALPS07560793 (Issue ALPS07560793) is referenced as a fix. Documented impact i...

CVE-2023-38465

CVE-2023-38465 affects the ims service, with a missing permission check that could lead to local information disclosure. The CVSSv3.1 base score is 5.5 (Privileges Required: Low, Attack Vector: Local, Confidentiality Impact: High, no impact on integrity/availability). Connected sources confirm th...

CVE-2023-38553

CVE-2023-38553 affects the gnss service on Unisoc chipsets, where a missing bounds check can trigger an out-of-bounds write. This could allow local escalation of privilege with System execution privileges needed (local, high privileges, no user interaction). The provided documents do not specify ...

CVE-2023-42682

CVE-2023-42682 affects the gsp driver and stems from a missing bounds check, allowing an out-of-bounds write that could cause local denial of service with system-level privileges required. The provided documents specify the impact (local DoS) and privilege requirements but do not include exploit ...

CVE-2023-42726

CVE-2023-42726 affects TeleService components (UNISOC/chipset context) with an out-of-bounds read caused by a missing bounds check. The consequence stated across sources is a local denial-of-service scenario, potentially tied to the ability to execute with system privileges. No concrete product v...

CVE-2023-42727

The CVE-2023-42727 entry concerns an out-of-bounds write in a GPU driver caused by an incorrect bounds check, leading to local denial of service with SYSTEM privileges required. Multiple connected records corroborate that the affected component is the GPU driver and describe the same root cause a...

CVE-2023-48345

The CVE-2023-48345 entry concerns a vulnerability in the video decoder where improper input validation can trigger an out-of-bounds read, potentially causing a local denial of service. The issue is described as allowing local access with no additional privileges required, with attack vector Local...

CVE-2023-48347

CVE-2023-48347 affects a video decoder component in Unisoc chipsets. The root cause is improper input validation that enables an out-of-bounds read, leading to a local denial of service with no additional privileges required. Reports consistently describe the impact as local DoS; no exploit detai...

CVE-2024-20113

The CVE-2024-20113 entry concerns the MediaTek chipset component “ccu,” where a missing bounds check can cause an out-of-bounds write. This leads to local privilege escalation with SYSTEM execution privileges required, and no user interaction is needed for exploitation. Multiple connected sources...

CVE-2025-20785

CVE-2025-20785 affects MediaTek chipsets (display component). The issue is a memory corruption via a use-after-free in display paths, leading to local privilege escalation if an attacker already has System privileges. Exploitation details or in-the-wild status are not provided in the documents. A...

CVE-2025-26434

CVE-2025-26434 involves libxml2 with a vulnerability described as an out-of-bounds read caused by a buffer overflow. The impact is local information disclosure without requiring privileges or user interaction, as stated in the public descriptions. Connected documents corroborate the root cause as...

CVE-2025-32325

CVE-2025-32325 is a local elevation-of-privilege vulnerability in Android’s Parcel.cpp: in appendFrom, a heap-based out-of-bounds write could occur, enabling local privilege escalation without extra execution privileges or user interaction. Multiple connected sources (NVD/NCSC/CNVD/CVELIST, OSV) ...

CVE-2025-36893

CVE-2025-36893 describes a local information-disclosure vulnerability due to uninitialized data in ReadTachyonCommands within gxp_main_actor.cc. The issue can leak information with no additional execution privileges and no user interaction required. Affected component: the gxp main actor’s ReadTa...

CVE-2025-36909

CVE-2025-36909 is an information-disclosure vulnerability affecting WLAN in Google Pixel devices as described in the Pixel update bulletin. According to NVD and cross‑references, this issue is classified as Information disclosure with a CVSS 3.1 base score of 5.3 (Medium). The entry indicates an ...

CVE-2025-48526

The CVE-2025-48526 affects ChooserActivity.java in Android’s Chooser component, where createMultiProfilePagerAdapter allows launching into another user profile due to improper input validation. The risk is local elevation of privilege with no required user interaction, and exploitation is local (...

CVE-2025-48535

Summary of CVE-2025-48535 (Android): A flaw in assertSafeToStartCustomActivity within AppRestrictionsFragment.java allows a parcel mismatch to trigger a launch-anywhere vulnerability via unsafe deserialization, enabling local elevation of privilege without additional execution privileges or user ...

CVE-2025-48546

CVE-2025-48546 affects SafeActivityOptions.java. The issue arises during checkPermissions, enabling a possible background activity launch due to a logic error. This can lead to local escalation of privilege with no additional execution privileges required, and no user interaction needed for explo...