CVE-2020-0493

CVE-2020-0493 is an Android Pixel vulnerability tied to CPDF_SampledFunc::v_Call, where an out-of-bounds read due to input validation issues could disclose local information without user interaction. The issue is listed in the Pixel update bulletin for December 2020 as CVE-2020-0493 (Android bug ...

CVE-2020-27025

CVE-2020-27025 affects Android 11 and is caused by an unsafe PendingIntent in EapFailureNotifier.java and SimRequiredNotifier.java, enabling a permission bypass that can lead to local information disclosure. The issue requires no user interaction and could be triggered with local access; the root...

CVE-2020-27031

CVE-2020-27031 affects Android 11, where in nfc_data_event of nfc_ncif.cc there is a possible out-of-bounds read due to a missing bounds check. This can lead to local information disclosure and may require system privileges, with no user interaction needed for exploitation. The provided documents...

CVE-2021-0629

The CVE-2021-0629 entry centers on the mdlactl driver, where a use-after-free leads to memory corruption and local privilege escalation, requiring System privileges but no user interaction. Multiple connected records corroborate the issue and cite patch ALPS05776625 (Issue ID ALPS05776625) as the...

CVE-2021-0659

The CVE-2021-0659 entry concerns the apusys component where an out-of-bounds read can occur due to an incorrect bounds check. This may lead to local information disclosure and requires system privileges for impact; exploitation does not require user interaction. Affected context is supported by c...

CVE-2021-0660

The CVE-2021-0660 issue concerns the ccu component with an out-of-bounds read caused by incorrect error handling, enabling information disclosure potentially with System privileges. No user interaction is required. A patch is identified as ALPS05827145 (Issue ALPS05827145). RH and NVD entries cor...

CVE-2021-23243

Technical details are not publicly available in the provided documents. Information on affected products, versions, impact or remediation is not specified. Monitor for updates.

CVE-2022-48460

CVE-2022-48460 affects the UNISOC setting service. The root cause is undefined behavior from incorrect error handling, leading to local denial of service without additional privileges. Public details across connected documents confirm the issue’s nature but do not specify exact affected products/...

CVE-2023-20748

CVE-2023-20748 affects Mediatek-related chips with a vulnerability in the display path causing an out-of-bounds read due to a missing bounds check. Impact cited as local information disclosure with system-level privileges needed; exploitation reportedly does not require user interaction. Patch ID...

CVE-2023-30918

CVE-2023-30918 : The issue is a missing permission check in the telephony service, enabling local information disclosure without additional privileges. Connected sources identify affected UNISOC chipsets/telephony implementations (e.g., SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T618, T60...

CVE-2023-30933

CVE-2023-30933 involves a missing permission check in the telephony service that enables local information disclosure without additional execution privileges. The core issue is the telephony component failing to enforce access controls, per the CVE description. Connected documents expand on affec...

CVE-2023-30934

The CVE-2023-30934 entry describes a local information disclosure in the telephony service due to a missing permission check. Affected scope is supported by connected records noting UNISOC chipset impacts (e.g., various SC-series and T-series devices) with exploitation possible without additional...

CVE-2023-30935

CVE-2023-30935 affects the telephony service and is tied to a missing permission check that enables local information disclosure without additional execution privileges. Root cause: permission check gap in the telephony component. Impact: local confidentiality disclosure (C/H) with no privilege o...

CVE-2023-32789

CVE-2023-32789 concerns a missing permission check in the telephony service that enables local information disclosure without additional execution privileges. The core issue is a privilege check gap in the telephony component, with CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N indicating local acc...

CVE-2023-32856

CVE-2023-32856 concerns MediaTek chipsets where the display module has an out-of-bounds read caused by an incorrect status check. The vulnerability can lead to local information disclosure with System execution privileges required, and exploitation does not require user interaction. The available...

CVE-2023-33896

CVE-2023-33896 affects the libimpl-ril component. A missing bounds check can cause an out-of-bounds write, leading to local denial of service with System execution privileges required. The issue has a CVSSv3.1 base score of 4.4 (Medium) and is characterized as a local attack with high privileges ...

CVE-2023-33902

CVE-2023-33902 affects UNISOC Bluetooth service across multiple chipsets (e.g., SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T618/T612/T616/T770/T820/S8000). The root cause is a missing permission check in the Bluetooth service, enabling local information disclosure without additional execution pr...

CVE-2023-38448

CVE-2023-38448 involves the vowifiservice component. The connected documents describe a possible missing permission check in vowifiservice, leading to a local denial of service with no additional execution privileges. The public details specify a local attack vector with low attack complexity and...

CVE-2023-38459

CVE-2023-38459 affects vowifiservice. The connected documents confirm a missing permission check in vowifiservice as the root cause, enabling local privilege escalation with low privileges and no user interaction. Impact is described as local escalation of privilege; no explicit exploitation deta...

CVE-2023-38467

CVE-2023-38467 affects the urild service and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to a local denial of service with SYSTEM privileges required. Reported CVSSv3.1 vector (L/L/H/N/U) indicates local access, low complexity, high privileges required, ...

CVE-2023-40641

The vulnerability CVE-2023-40641 affects the Messaging component (notably on UNISOC chipsets per linked sources). The issue is a missing permission check in Messaging which could allow local information disclosure without requiring additional execution privileges. The cited sources collectively d...

CVE-2023-42692

CVE-2023-42692 concerns the wifi service on UNISOC chipsets, where a missing permission check can allow local escalation of privilege with no extra privileges. The CVSS 3.1 base vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects a high impact to confidentiality, integrity, and availability. Pu...

CVE-2023-42714

CVE-2023-42714 affects the firewall service and is discussed across multiple sources (NVD, Red Hat, CVE List, CNNVD). The root issue is a missing permission check that enables writing permission usage records for an app, leading to potential local information disclosure with no extra execution pr...

CVE-2023-42735

CVE-2023-42735 affects the telephony service (noted by NVD/Red Hat/PRION/CVE list). The vulnerability arises from a missing permission check in the telephony service, enabling local information disclosure with System execution privileges needed. CVSS v3.1 indicates a Local attack, Low attack comp...

CVE-2023-42736

CVE-2023-42736 concerns a missing permission check in the telecom service, leading to local privilege escalation with no extra privileges required. The connected documents (Red Hat, NVD, PRION/PRIO listing, and related vendor entries) consistently describe the issue as a telecom-service permissio...

CVE-2025-22424

CVE-2025-22424 is described across multiple sources as an Android vulnerability arising from improper input validation that can cause images to be revealed across users, enabling local privilege escalation with no extra execution privileges. The NVD entry assigns a CVSS v3.1 base score of 7.8 (Hi...

CVE-2025-36895

CVE-2025-36895 is an information-disclosure vulnerability documented in the Pixel security bulletin, affecting the WLAN subcomponent. The Android bulletin lists it under Pixel with type ID, High severity, and affected as WLAN. The CVSSv3.1 vector indicates a Network attack vector, with Low attack...

CVE-2025-36909

CVE-2025-36909 is an information-disclosure vulnerability affecting WLAN in Google Pixel devices as described in the Pixel update bulletin. According to NVD and cross‑references, this issue is classified as Information disclosure with a CVSS 3.1 base score of 5.3 (Medium). The entry indicates an ...

CVE-2025-48602

CVE-2025-48602 describes a logic error in Android’s KeyguardViewMediator.java (exitKeyguardAndFinishSurfaceBehindRemoteAnimation) that can cause a lockscreen bypass, enabling local escalation of privilege without additional execution privileges or user interaction. Affected software is the Androi...

CVE-2026-0023

Technical details for CVE-2026-0023 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-0025

CVE-2026-0025 is a vulnerability in Android’s Notification.java hasImage path where a permissions bypass can leak information across users, enabling local privilege escalation with no extra execution privileges and no user interaction. Exploitation is local and no exploit details are provided in ...

CVE-2026-0031

CVE-2026-0031 affects Google Android’s kernel code (mem_protect.c) with an out-of-bounds write caused by an integer overflow. This vulnerability allows local privilege escalation without user interaction. Public references indicate Android kernel fixes/updates were released (and related advisorie...

CVE-2026-0085

CVE-2026-0085 relates to a vulnerability in the DataRowHandler.java function applySimpleFieldMaxSize , where improper input validation could allow inserting an unusually large contact name. The result is a local Denial of Service with no extra privileges and no user interaction required. Document...

CVE-2026-0162

Technical details for CVE-2026-0162 are not publicly provided in the connected documents. The available descriptions only indicate a memory corruption in AudioSdpParser.cpp potentially enabling remote code execution. Monitor for updates and additional technical disclosures.

CVE-2018-11827

CVE-2018-11827 affects CAF/Android builds (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux kernel. The issue: improper validation of an array index in the WMA roam synchronization handler can cause an out-of-bounds write. This is tied to Qualcomm WLAN/driver components in the af...

CVE-2018-11911

Affected software : Android releases (Android for MSM, Firefox OS for MSM, QRD Android) built with CAF Linux kernel. Root cause : improper configuration of a script, as described in CNVD-2018-25313. Impact : potential unprivileged access / privilege access control vulnerability. References in con...

CVE-2018-11913

Technical details for CVE-2018-11913 are not publicly provided in the connected documents. The available records reiterate a generic issue related to dev node configuration in CAF/Linux kernel builds. Monitor for updates from official advisories.

CVE-2018-5860

CVE-2018-5860 affects the MDSS (multimedia display) driver in Android builds for MSM, Firefox OS for MSM, and QRD Android, provided by CAF on Linux-based kernels. The root cause is that a data structure may be used without proper initialization, as described in multiple sources. According to the ...

CVE-2018-5908

CVE-2018-5908 affects CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The root cause is a missing buffer length validation in a display function, enabling a potential buffer overflow. CVSS indicates a local, low-complexity attack with HIGH impact acro...

CVE-2019-2064

In Android 10, CVE-2019-2064 is a vulnerability in the libxaac library where a missing bounds check enables an out-of-bounds write, potentially enabling remote code execution. The issue affects Android-10 devices using libxaac and is documented across multiple sources (NVD entry; Red Hat and CNVD...

CVE-2019-2146

CVE-2019-2146 affects Android 10, with a vulnerability in libxaac caused by a missing bounds check that leads to an out-of-bounds read. Consequence: information disclosure without execution privileges; exploitation requires user interaction. Affected component: libxaac (Android 10). Vendor/OS con...

CVE-2019-2147

CVE-2019-2147 affects the Android libxaac library. The issue is an out-of-bounds read caused by a missing bounds check in libxaac, leading to potential information disclosure. Exploitation requires user interaction, and the vulnerability does not grant additional execution privileges. Connected R...

CVE-2019-2156

CVE-2019-2156 affects Android 10 where the libxaac library has an out-of-bounds read due to a missing bounds check, enabling potential information disclosure. The vulnerability impacts information confidentiality and requires user interaction to exploit; there is no indication of remote code exec...

CVE-2019-2158

CVE-2019-2158 affects Android-10 in the libxaac library, with an out-of-bounds read caused by a missing bounds check. This can lead to an information disclosure and requires user interaction to exploit. The vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, PRION, CVE List) ...

CVE-2019-2161

In Android 10, the libxaac library contains an information-disclosure vulnerability caused by a missing bounds check, leading to an out-of-bounds read. It affects Android-10, with exploitation requiring user interaction. Several sources (NVD, Red Hat, CNVD, CVE records) consistently describe this...

CVE-2019-2163

Concerning CVE-2019-2163, multiple connected sources confirm a concrete issue in the Android 10 libxaac library: an out-of-bounds read due to a missing bounds check, leading to information disclosure. Affected component: libxaac within Android-10. Impact per sources: potential information leakage...

CVE-2019-9355

CVE-2019-9355 is an Android Bluetooth information-disclosure vulnerability described as an out-of-bounds read caused by a missing bounds check. It could allow remote information disclosure without user interaction, with network attack potential as per CVSS metrics (CVSS v3.1: 7.5, HIGH; CVSS v2: ...

CVE-2020-10844

CVE-2020-10844 is documented as an out-of-bounds read vulnerability in Samsung mobile devices’ media.audio_policy, affecting O(8.x), P(9.x), and Q(10.0) software. The Samsung internal ID is SVE-2019-16333. The connected Red Hat, CNVD, CNVD-style entries repeat the same description; no product-spe...

CVE-2021-0421

The CVE-2021-0421 entry concerns Mediatek’s memory management driver, where a missing bounds check can cause local information disclosure without extra execution privileges. Exploitation reportedly does not require user interaction, and the impact is described as disclosure of local information (...

CVE-2021-0423

CVE-2021-0423 concerns an information disclosure in the Mediatek memory management driver due to uninitialized data. This can enable local information disclosure with no additional execution privileges and without user interaction. The vulnerability is documented across multiple sources including...