CVE-2019-9286

CVE-2019-9286 affects Android 10 components via Bluetooth, describing an out-of-bounds read caused by a missing bounds check that could enable remote information disclosure without user interaction. The NVD notes CVSSv3.1 base score 7.5 (HIGH) with network attack vector, no privileges, UI: NONE, ...

CVE-2024-20113

The CVE-2024-20113 entry concerns the MediaTek chipset component “ccu,” where a missing bounds check can cause an out-of-bounds write. This leads to local privilege escalation with SYSTEM execution privileges required, and no user interaction is needed for exploitation. Multiple connected sources...

CVE-2026-0020

CVE-2026-0020 is a Google Android vulnerability in the parsePermissionGroup path of ParsedPermissionUtils.java that enables a local elevation of privilege by bypassing a consent dialog to obtain permissions. The weakness allows exploitation with no user interaction and requires only local access....

CVE-2019-2155

CVE-2019-2155 affects the Android 10 libxaac library. The vulnerability is an out-of-bounds read due to a missing bounds check in libxaac, enabling information disclosure. Exploitation requires user interaction, and there is no indication of remote code execution in the provided documents. Impact...

CVE-2019-9246

CVE-2019-9246 describes an out-of-bounds read in the Android NFC stack due to a missing bounds check. This could allow local information disclosure on affected devices and requires user interaction for exploitation. The vulnerability is associated with Android 10 (Android-10). According to the An...

CVE-2019-9355

CVE-2019-9355 is an Android Bluetooth information-disclosure vulnerability described as an out-of-bounds read caused by a missing bounds check. It could allow remote information disclosure without user interaction, with network attack potential as per CVSS metrics (CVSS v3.1: 7.5, HIGH; CVSS v2: ...

CVE-2019-9390

CVE-2019-9390 affects Android 10 Bluetooth stack. The defect is an out-of-bounds read due to a missing bounds check, enabling remote denial of service without privileges or user interaction. Impact is supported by NVD metrics (CVSSv3.1 base score 7.5, HIGH; network attacker with no auth, no UI). ...

CVE-2019-9438

The CVE-2019-9438 entry affects Android 10 Package Manager service. It enables information disclosure to other users via a confused deputy, allowing local disclosure of information about installed packages without extra execution privileges and without user interaction. The documented impact is a...

CVE-2020-0197

CVE-2020-0197 affects Android 10, caused by an out-of-bounds read in InitDataParser::parsePssh, enabling local information disclosure without user interaction. Official sources (NVD/Red Hat/NCSC and Pixel bulletin) confirm this Android Media Framework issue and list Android-10 as affected. The vu...

CVE-2020-0282

Technical details about CVE-2020-0282 are not publicly disclosed in the provided documents. No concrete product/version/exploit information is present beyond the Android-11 NFC bounds issue. Monitor for updates from official advisories.

CVE-2020-0314

CVE-2020-0314 affects Android 11 AudioService, where missing permission checks could enable local disclosure of audio configuration without extra execution privileges. The root cause is insufficient permission validation in AudioService, with exploitation not requiring user interaction. Documente...

CVE-2020-0316

CVE-2020-0316 affects Android 11, with a missing permission check in Telephony that could allow local disclosure of radio data without extra privileges or user interaction. The issue targets the Telephony component and is described across multiple sources as an information disclosure vulnerabilit...

CVE-2020-0351

CVE-2020-0351 affects Android 11 via the libstagefright component, where improper input validation can cause CPU exhaustion leading to remote denial of service. Impact is a DoS with no additional execution privileges required; exploitation is noted as requiring user interaction, but explicit expl...

CVE-2020-0370

CVE-2020-0370 affects the Android 11 platform, with a vulnerability in the libAACdec component where a missing bounds check can cause an out-of-bounds read. This may enable remote information disclosure and, per the CVE description, requires user interaction to exploit. Affected software is Andro...

CVE-2020-0493

CVE-2020-0493 is an Android Pixel vulnerability tied to CPDF_SampledFunc::v_Call, where an out-of-bounds read due to input validation issues could disclose local information without user interaction. The issue is listed in the Pixel update bulletin for December 2020 as CVE-2020-0493 (Android bug ...

CVE-2020-10834

CVE-2020-10834 affects Samsung mobile devices running P(9.0). The issue allows attackers to view notifications on the lock screen via Routines, tied to Samsung ID SVE-2019-15074. Connected sources (Red Hat, NVD/NVD-linked entries, CNVD, CNVD, EUVD, PRION) confirm the vulnerability description but...

CVE-2021-0421

The CVE-2021-0421 entry concerns Mediatek’s memory management driver, where a missing bounds check can cause local information disclosure without extra execution privileges. Exploitation reportedly does not require user interaction, and the impact is described as disclosure of local information (...

CVE-2021-0455

The CVE-2021-0455 issue is described as an out-of-bounds write in the Citadel chip firmware, caused by a missing bounds check. It grants local elevation of privilege with System execution privileges required, and requires no user interaction to exploit. In the provided materials, the vulnerabilit...

CVE-2022-48389

CVE-2022-48389 affects the modem control device in Unisoc chipsets. Root cause: a missing bounds check enables an out-of-bounds write. Impact: local denial of service with SYSTEM privileges (high-impact write, per CVSS 3.1 vector). Exploitation details are not provided in the connected documents;...

CVE-2023-20767

CVE-2023-20767 affects the pqframework. The root cause is a missing bounds check that enables an out-of-bounds write, potentially allowing local privilege escalation with System execution privileges. Exploitation requires no user interaction. The patch referenced is ALPS07629585 (Issue ALPS076295...

CVE-2023-20851

CVE-2023-20851 affects stc with a race-condition leading to an out-of-bounds read and local escalation of privilege. Impact requires System execution privileges and user interaction for exploitation, per multiple feeds. A patch is available (Patch ID ALPS08048635; Issue ID ALPS08048635). Exploita...

CVE-2023-30918

CVE-2023-30918 : The issue is a missing permission check in the telephony service, enabling local information disclosure without additional privileges. Connected sources identify affected UNISOC chipsets/telephony implementations (e.g., SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T618, T60...

CVE-2023-32860

Affected product: MediaTek chips (display module). Vulnerability: classic buffer overflow due to a missing bounds check in display handling. Root cause: out-of-bounds write leading to local privilege escalation with SYSTEM-level privileges required. Exploit: no user interaction required (local ex...

CVE-2023-33896

CVE-2023-33896 affects the libimpl-ril component. A missing bounds check can cause an out-of-bounds write, leading to local denial of service with System execution privileges required. The issue has a CVSSv3.1 base score of 4.4 (Medium) and is characterized as a local attack with high privileges ...

CVE-2023-33904

CVE-2023-33904 affects the hci_server component. The root cause is a missing bounds check that enables an out-of-bounds read, which can lead to local denial of service with system execution privileges required. Multiple databases corroborate this vulnerability and cite the same description. Affec...

CVE-2023-38442

CVE-2023-38442 affects vowifiservice. The issue is a missing permission check that could lead to local information disclosure with no additional execution privileges. CVSS v3.1 base score 5.5 (Medium) with LOCAL attack vector, low attack complexity, low privileges required, and high confidentiali...

CVE-2023-38448

CVE-2023-38448 involves the vowifiservice component. The connected documents describe a possible missing permission check in vowifiservice, leading to a local denial of service with no additional execution privileges. The public details specify a local attack vector with low attack complexity and...

CVE-2023-40641

The vulnerability CVE-2023-40641 affects the Messaging component (notably on UNISOC chipsets per linked sources). The issue is a missing permission check in Messaging which could allow local information disclosure without requiring additional execution privileges. The cited sources collectively d...

CVE-2023-42652

CVE-2023-42652 affects the UNISOC/engineermode context. The root cause is a missing permission check in engineermode, enabling local information disclosure with no additional execution privileges. Impact aligns with the CVSS note: local attacker access to confidential data; exploitation status no...

CVE-2023-42674

CVE-2023-42674 affects the IMS service (imsservice) in UNISOC chipsets. The vulnerability arises from a missing permission check that permits writing permission usage records for an app, enabling local information disclosure without requiring additional execution privileges. Multiple sources corr...

CVE-2023-42691

Technical details about CVE-2023-42691 are not publicly provided in the connected documents. The sources only reiterate a missing permission check in the wifi service. Monitor for updates for affected products, root cause, impact, and fixes.

CVE-2023-42692

CVE-2023-42692 concerns the wifi service on UNISOC chipsets, where a missing permission check can allow local escalation of privilege with no extra privileges. The CVSS 3.1 base vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects a high impact to confidentiality, integrity, and availability. Pu...

CVE-2023-42709

CVE-2023-42709 affects UNISOC/chipset Firewall service where a missing permission check enables writing of an app’s permission usage records, leading to local information disclosure without extra privileges. Exploitation details are not provided in the connected documents; no concrete exploit vec...

CVE-2023-42713

CVE-2023-42713 affects UNISOC chipsets’ firewall service, where a missing permission check enables an app to write permission usage records. Root cause: inadequate authorization on the firewall service, allowing local information disclosure without extra execution privileges. Impact: local inform...

CVE-2023-42736

CVE-2023-42736 concerns a missing permission check in the telecom service, leading to local privilege escalation with no extra privileges required. The connected documents (Red Hat, NVD, PRION/PRIO listing, and related vendor entries) consistently describe the issue as a telecom-service permissio...

CVE-2025-20781

The CVE-2025-20781 issue affects MediaTek chipsets’ display component, caused by a memory corruption due to use-after-free. This leads to local escalation of privilege if an attacker already has System privileges; exploitation does not require user interaction. A patch is listed as ALPS10182914 (...

CVE-2025-32326

CVE-2025-32326 describes a local elevation of privilege in Android via a confused deputy in AppRestrictionsFragment.java, enabling bypass of the intent security check. Impact is local with user interaction required; no additional execution privileges needed. Root cause: insecure bypass in multipl...

CVE-2025-48541

CVE-2025-48541 : In the Android code path, the bug occurs in the onCreate of FaceSettings.java, where improper input validation can remove biometric unlock across user profiles. This enables local escalation of privilege with no additional execution privileges required, and exploitation does not ...

CVE-2025-48548

CVE-2025-48548 describes a race condition in AppOpsControllerImpl.java that could allow recording audio without the privacy indicator, enabling local elevation of privilege with user interaction required. The issue is discussed across multiple sources (Android/Red Hat/CNVD views) with the same co...

CVE-2025-48579

CVE-2025-48579 involves a local elevation-of-privilege in Android’s MediaProvider.java where a proxy/Confused Deputy behavior could bypass the external storage write permission. The issue can allow a local attacker to gain elevated privileges without additional execution privileges or user intera...

CVE-2025-48646

CVE-2025-48646 affects Google Android via the executeRequest path in ActivityStarter.java, enabling a possible elevation of privilege through a confused deputy. The issue is described as a local escalation of privilege requiring user interaction for exploitation. Affected context in public record...

CVE-2026-0035

CVE-2026-0035 affects the Android MediaProvider component. In MediaProvider.java's createRequest, a logic error can allow an app to gain read/write access to non-existent files, enabling local privilege escalation without extra execution privileges or user interaction. This vulnerability is docum...

CVE-2026-0036

CVE-2026-0036 describes a tapjacking vulnerability in StageCoordinator.java that could enable local privilege escalation via a tapjacking/overlay attack without user interaction. The issue allows exploitation with local access and is associated with the Android platform (Android Bulletin context ...

CVE-2026-0040

CVE-2026-0040 affects code in ubsan_throwing_runtime.cpp where an integer overflow can crash the process, enabling remote denial of service with no user interaction. CVSSv3.1 metrics indicate NETWORK access, LOW privileges, LOW attack complexity, and HIGH availability impact. No remediation or ex...

CVE-2026-0088

The CVE-2026-0088 affects Android’s CertInstaller.getCallingAppLabel, where a misleading or insufficient UI could allow hiding a sensitive security dialogue. This enables local privilege escalation with no extra privileges and no user interaction required for exploitation, as described across NVD...

CVE-2026-0120

CVE-2026-0120 affects the modem (baseband) and is caused by an incorrect bounds check leading to an out-of-bounds write. This could enable remote code execution without privileges and without user interaction. Public details across sources confirm the issue and its critical impact, but do not pro...

CVE-2026-0138

The CVE-2026-0138 issue affects the function lwis_io_buffer_write in lwis_io_buffer.c, described across multiple sources (NVD, ENISA EUVD, CVE listings, OSV) as a possible out-of-bounds write caused by memory corruption. Impact is local elevation of privilege requiring system execution privileges...

CVE-2026-0141

CVE-2026-0141 describes a likely out-of-bounds read in decodeAppPacket of RtcpAppPacket.cpp caused by a missing bounds check. The vulnerability enables a remote information disclosure without requiring additional execution privileges and without user interaction. Public references in the provided...

CVE-2026-0156

CVE-2026-0156 describes a memory safety issue in checkSsrcCollisionOnRcv of RtpSession.cpp caused by a missing null check. This could allow remote denial of service without additional execution privileges, and exploitation does not require user interaction. The information appears consistently in...

CVE-2014-9947

Technical details about CVE-2014-9947 are not provided in the connected documents. The initial description indicates a TrustZone information exposure in CAF Android builds, but there are no product, version, impact, or fix specifics to act on. Monitor for updates.