CVE-2023-20697

CVE-2023-20697 affects MediaTek devices via the keyinstall module, due to a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure with System privileges required; exploitation does not require user interaction. The patch referenced is ALPS07589148 ...

CVE-2023-21162

CVE-2023-21162 affects the PowerVR GPU driver (Imagination Technologies) via RGXUnbackingZSBuffer in rgxta3d.c. The issue is a use-after-free that could enable arbitrary code execution and local kernel privilege escalation without extra interaction. Public exploitation details aren’t provided in ...

CVE-2024-20009

CVE-2024-20009 concerns MediaTek’s alac decoder where an out-of-bounds write can occur due to incorrect error handling. The vulnerability could enable remote escalation of privilege with no additional execution privileges required, and exploitation requires user interaction. The issue is document...

CVE-2024-20065

CVE-2024-20065 concerns a local information-disclosure flaw in the telephony stack caused by a missing permission check. The issue allows disclosure without extra execution privileges and requires no user interaction. Connected sources tie this to Mediatek telephony components (ALPS08698617; MSV-...

CVE-2024-20101

CVE-2024-20101 affects the MediaTek WLAN stack; the vulnerability arises from improper input validation in the WLAN driver, causing an out-of-bounds write that could enable remote code execution with no privileges and no user interaction required. Public references in NVD/Red Hat and related bull...

CVE-2024-23698

CVE-2024-23698 affects the Android/Linux kernel code path RGXFWChangeOSidPriority in rgxfwutils.c, where a missing bounds check could enable arbitrary code execution and local escalation of privilege with no user interaction. The issue is described consistently across multiple sources (Android An...

CVE-2024-27204

CVE-2024-27204 involves an out-of-bounds write in tmu_set_gov_active of tmu.c caused by a missing bounds check. The issue allows local escalation of privilege with no additional privileges required and does not require user interaction. Connected sources confirm the vulnerability in media/firmwar...

CVE-2024-27230

The vulnerability CVE-2024-27230 affects ProtocolPsKeepAliveStatusAdapter::getCode() in protocolpsadapter.cpp, with a missing bounds check causing an out-of-bounds read that could disclosures local information and requires baseband firmware compromise. Exploitation status is not detailed in the p...

CVE-2024-40661

CVE-2024-40661 affects Android’s mayAdminGrantPermission in AdminRestrictedPermissionsUtils.java, enabling access to the microphone and leading to local elevation of privilege with no extra execution privileges required. Exploitation is local and does not require user interaction. Android bulleti...

CVE-2024-43080

CVE-2024-43080 affects Android’s AppRestrictionsFragment.java, where unsafe deserialization can lead to a local escalation of privilege. The issue enables privilege elevation with no extra execution privileges, and exploitation requires user interaction. The CVE entry provides a high impact asses...

CVE-2014-7914

The CVE-2014-7914 entry concerns the Android Bluetooth stack (btif_dm.c) prior to version 5.1. The root cause is improper enforcement of the temporary nature of Bluetooth pairing, which can be bypassed by an attacker via crafted Bluetooth packets after a user taps a crafted NFC tag. Documented im...

CVE-2019-2022

CVE-2019-2022 affects Android platforms (Android-7.0 through Android-9) and is tied to rw_t3t_act_handle_fmt_rsp and rw_t3t_act_handle_sro_rsp in rw_t3t.cc, where a missing bounds check enables a possible out-of-bounds read leading to local information disclosure. Exploitation requires user inter...

CVE-2020-0389

CVE-2020-0389 affects Android 10/11 in the Framework area, specifically via RecordingService.java createSaveNotification. The issue is a permission bypass caused by an unsafe PendingIntent, enabling local information disclosure with user privileges and no user interaction needed. Public details i...

CVE-2020-0441

CVE-2020-0441 affects Android framework’s Notification.java (Message and toBundle) where improper input validation can cause resource exhaustion and remote DoS without user interaction. Affected: Android 8.0–11 (Android-8.0, -8.1, -9, -10, -11). Impact: denial of service requiring device reset as...

CVE-2020-13843

Technical details about CVE-2020-13843 are not provided in the supplied documents; monitor for updates.

CVE-2021-0394

CVE-2021-0394 is an out-of-bounds read in android_os_Parcel_readString8 caused by a missing bounds check, enabling local information disclosure without extra privileges. Affected: Android 11, 10, 9, 8.1; exploitation is local and does not require user interaction. Mitigation per the Android Secur...

CVE-2021-0398

CVE-2021-0398 describes a local EoP in Android 11 where ActiveServices.bindServiceLocked could allow a confused deputy to launch a foreground service, requiring no user interaction. The vulnerability is rooted in bindServiceLocked in ActiveServices.java, with the potential to elevate privileges w...

CVE-2021-0400

CVE-2021-0400 affects Android 9–11 in GnssLocationProvider.java. In injectBestLocation and handleUpdateLocation, there is improper input validation that could cause the device to report location data to emergency services incorrectly. Exploitation is local (attack vector: LOCAL) with no user inte...

CVE-2021-0504

CVE-2021-0504 describes an out-of-bounds read in the Bluetooth AVRCP parser (avrc_pars_browse_rsp in avrc_pars_ct.cc) due to a missing bounds check. This could enable remote information disclosure on Android 11 devices without additional execution privileges and with no user interaction (attack v...

CVE-2021-0686

CVE-2021-0686 affects Android 10/11 and involves RoleManagerService.getDefaultSmsPackage. A missing permission check could allow a local attacker to disclose information about the default SMS app for a different device user without user interaction. The vulnerability enables local information dis...

CVE-2021-0927

CVE-2021-0927 describes a local elevation-of-privilege in Android’s TvInputManagerService, triggered by a logic error in requestChannelBrowsable. The vulnerability affects Android 8.1, 9, 10, 11 and 12 and could allow a local attacker to bypass permissions with no user interaction. Public documen...

CVE-2021-0932

CVE-2021-0932 affects Android 10 via an unsafe PendingIntent in showNotification (NavigationModeController.java), enabling a possible confused deputy and local elevation of privilege with actions executed as the System UI, without user interaction. Public details consistently reference the same r...

CVE-2021-39687

Summary: CVE-2021-39687 affects Android kernel code in the driver path, specifically the HandleTransactionIoEvent in the actuator_driver.cc. The issue is a possible out-of-bounds read caused by a heap buffer overflow, which can lead to a local information disclosure without requiring user interac...

CVE-2022-20103

In CVE-2022-20103, aee daemon is vulnerable to information disclosure via symbolic link following, enabling local information exposure and requiring system privileges for exploitation. Exploitation reportedly does not require user interaction. The vulnerability is associated with patch ALPS063839...

CVE-2022-20111

CVE-2022-20111 affects MediaTek ion (ion memory allocator) with a use-after-free caused by incorrect error handling, leading to local privilege escalation without user interaction. The vulnerability is described as requiring local access to exploit, with a potential for high-impact kernel/privile...

CVE-2022-20170

CVE-2022-20170 affects Google Pixel modem/Kernel stack (Pixel modem) and enables a remote code execution via a zero-click attack that could downgrade the device to 2G and seize control of the handset. Publicly documented as a critical, network-exposed vulnerability (CVSS v3.1 score 9.8). Google p...

CVE-2022-38676

CVE-2022-38676 involves a missing bounds check in the GPU driver, causing an out-of-bounds write that could lead to local denial of service in the kernel. Connected sources indicate the issue affects GPU/kernel components (notably Unisoc-related kernel paths) and is described as a local DoS risk....

CVE-2022-39129

CVE-2022-39129 describes a potential out-of-bounds write in the face detect driver caused by a missing bounds check, leading to local denial of service in the kernel. The primary sources in the connected set reiterate this issue across multiple advisories (NVD entry and vendor postings) and class...

CVE-2022-47336

CVE-2022-47336 involves a missing permission check in the telecom service, which the available documents identify as a local denial-of-service risk. The root cause is described as an insufficient authorization gate within the telecom service, enabling a local attacker to disrupt service availabil...

CVE-2023-20657

CVE-2023-20657 affects MediaTek’s mtee with an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation without user interaction. The issue is documented across multiple sources (e.g., NVD/Red Hat bulletin entries) and is associated with patch ALPS07571485 (Issue ...

CVE-2023-20698

CVE-2023-20698 affects MediaTek "keyinstall" with an out-of-bounds read caused by a missing bounds check. Impact is local information disclosure with system privileges needed; no user interaction. Patch ALPS07589144 addresses the issue. Connected sources consistently reference keyinstall across m...

CVE-2023-21215

CVE-2023-21215 relates to a race condition in the PowerVR GPU driver (DevmemIntAcquireRemoteCtx in devicemem_server.c) that can allow arbitrary code execution and local kernel privilege escalation without user interaction. The available connected records confirm the vulnerability and its impact b...

CVE-2023-21402

CVE-2023-21402 affects the PowerVR GPU driver (Imagination Technologies) in Android/ChromeOS via the MMU_UnmapPages() function in mmu_common.c. The issue is an out-of-bounds read caused by improper input validation, enabling local escalation of privilege in the kernel with no user interaction req...

CVE-2023-32836

The CVE-2023-32836 entry relates to MediaTek ALPS08126725 affecting the display component. The root cause is an integer overflow leading to an out-of-bounds write, enabling local escalation of privilege with System privileges required; no user interaction is needed. Patch ALPS08126725 is referenc...

CVE-2024-27235

CVE-2024-27235 is documented in Google Pixel security updates as affecting the ACPM component (Pixel). The root cause is an out-of-bounds read in the plugin_extern_func due to a missing bounds check, leading to possible local information disclosure with no required user interaction. The vulnerabi...

CVE-2024-40652

The CVE-2024-40652 entry describes an elevation-of-privilege issue in Android’s SettingsHomepageActivity onCreate, where a missing permission check could allow provisioning-phase access to the Settings app. This enables local privilege escalation with UI interaction required for exploitation. Pub...

CVE-2016-2067

CVE-2016-2067 affects the Linux kernel MSM GPU driver: drivers/gpu/msm/kgsl.c in the MSM graphics driver (QuIC Android contributions) for kernel 3.x. The root cause is mishandling of the KGSL_MEMFLAGS_GPUREADONLY flag, which can create accidental read/write mappings. This enables a local attacker...

CVE-2017-0752

CVE-2017-0752 is an elevation-of-privilege issue in the Android framework (windowmanager) affecting Android 4.4.4 through 7.1.2. Root cause: privilege escalation via windowmanager overlay/toast-style interaction (no exploit details provided in the sources). Impact is described as high (confidenti...

CVE-2019-2005

CVE-2019-2005 affects Android 8.0–9, where in onPermissionGrantResult of GrantPermissionsActivity.java a missing permission check can lead to a local elevation of privilege on a locked device. Exploitation requires user interaction; no additional execution privileges are needed. NVD lists CVSSv3 ...

CVE-2020-0367

CVE-2020-0367 is documented as an out-of-bounds write due to a missing bounds check affecting Android components (notably Widevine) with Android ID A-162980455. Connected OSV records (ASB-A-162980455 and ASB-A-162980705) describe out-of-bounds write/read issues related to this same identifier. Pu...

CVE-2020-0386

CVE-2020-0386 concerns an Elevation of Privilege in Android related to a tapjacking risk in RequestPermissionActivity.java. The issue arises in onCreate where an insecure default value could enable a local attacker to manipulate Bluetooth discoverability, requiring user interaction for exploitati...

CVE-2020-0437

CVE-2020-0437 affects Android's CellBroadcastReceiver: a missing permission check in the intent handlers can allow a local attacker to cause a denial of service of emergency alerts without extra privileges or user interaction. The vulnerability is listed against Android versions 8.0–11. Exploitat...

CVE-2021-0426

CVE-2021-0426 affects Android 11 (and referenced entries) with a vulnerability in LogEvent.cpp: parsePrimaryFieldFirstUidAnnotation that can cause a heap buffer overflow leading to local elevation of privilege. Exploitation requires no user interaction; attacker could gain higher privileges withi...

CVE-2021-0577

CVE-2021-0577 affects the Android flv extractor component. The issue is described as an out-of-bounds write caused by a heap buffer overflow, leading to local privilege escalation with no additional execution privileges required and no user interaction needed. The vulnerability is labeled high se...

CVE-2021-0871

PowerVR kernel driver issue CVE-2021-0871 involves PVRSRVBridgePMRPDumpSymbolicAddr where a missing size check can cause an integer overflow and out-of-bounds heap access. The described impact is local escalation of privilege with no additional execution privileges needed, and exploitation is not...

CVE-2022-20059

CVE-2022-20059 concerns a boundary-check omission in the preloader (usb) leading to an out-of-bounds write and local privilege escalation with physical access. The entry notes user interaction is required for exploitation. Connected sources specify affected MediaTek MT line chips (e.g., MT6761/MT...

CVE-2022-20172

CVE-2022-20172 concerns the Android kernel component ShannonRcsService.java, where the onbind method lacks a necessary permission check. This can enable local information disclosure without requiring additional execution privileges or user interaction, per multiple sources. Affected context is de...

CVE-2022-20402

CVE-2022-20402 is documented in the Pixel Update Bulletin as a Critical RCE affecting the Android kernel via the modem component. The NVD entry shows a high-severity, network-exposed vulnerability with CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (score 9.8). The Pixel bulletin lists CVE-2022-2...

CVE-2022-20459

CVE-2022-20459 affects the Android kernel’s Titan M component on Google Pixel devices. The issue is described as improper input validation that can redirect code execution, enabling local escalation of privilege with system-level privileges and no user interaction required. The vulnerability is c...

CVE-2022-20464

CVE-2022-20464 affects Android’s audio processing path in ap_input_processor.c (Android kernel). The logic error can allow recording audio during a phone call, causing local information disclosure. Impact is confidentiality loss (HIGH) with access locally from a user with LOW privileges and no us...