CVE-2021-0592

CVE-2021-0592 is a Widevine DRM code-execution vulnerability described across multiple sources as out-of-bounds writes caused by improper input validation in WideVine. The NVD entry lists a network attack vector with high impact and a base CVSS v3 score of 8.8 (I:H, A:H, C:H) and notes that user ...

CVE-2023-20697

CVE-2023-20697 affects MediaTek devices via the keyinstall module, due to a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure with System privileges required; exploitation does not require user interaction. The patch referenced is ALPS07589148 ...

CVE-2024-20049

The flashc module in MediaTek chips is vulnerable to an information disclosure vulnerability caused by an uncaught exception . Exploitation requires System execution privileges and does not require user interaction. While technical details regarding the specific information disclosed are not prov...

CVE-2024-27235

A vulnerability exists in the plugin_extern_func method of a component in Google Pixel smartphones due to a missing bounds check . This flaw leads to a possible out-of-bounds read , which could result in local information disclosure . No additional execution privileges or user interaction are req...

CVE-2024-29749

A missing bounds check in the tmu_set_tr_thresholds function of tmu.c allows for a possible out-of-bounds write . This vulnerability affects the ACPM subcomponent on Google Pixel devices and can lead to local elevation of privilege without requiring additional execution privileges or user interac...

CVE-2024-34726

The CVE-2024-34726 issue is in PVRSRV_MMap (pvr_bridge_k.c) of the PVR bridge kernel module. A logic error in PVRSRV_MMap can allow arbitrary code execution, enabling local kernel escalation of privilege with no extra execution privileges and without user interaction. The available documents do n...

CVE-2024-40652

The CVE-2024-40652 entry describes an elevation-of-privilege issue in Android’s SettingsHomepageActivity onCreate, where a missing permission check could allow provisioning-phase access to the Settings app. This enables local privilege escalation with UI interaction required for exploitation. Pub...

CVE-2013-4787

Android 1.6–4.2 (Donut to Jelly Bean) contains a flaw in verifying APK cryptographic signatures: an APK.modified file with duplicate Zip entries may be installed despite one entry being validated, enabling arbitrary code execution via the Master Key vulnerability. The issue arises from inconsiste...

CVE-2015-3105

A memory corruption vulnerability in Adobe Flash Player , Adobe AIR , and Adobe AIR SDK allows remote attackers to execute arbitrary code or cause a denial of service. The issue is caused by a stack buffer overflow or memory corruption during the parsing of malicious SWF content . Affected versio...

CVE-2015-5578

The provided documents confirm CVE-2015-5578 affects Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR before 19.0.0.190 (and AIR SDK/Compiler before 19.0.0.190). The connected advisories indicate the root cause...

CVE-2015-9004

CVE-2015-9004 affects the Linux kernel up to version 3.18 (pre-3.19). The flaw is in kernel/events/core.c where improper handling of counter grouping enables local privilege escalation via crafted apps, involving perf_pmu_register and perf_event_open. The impact is local Privilege Escalation with...

CVE-2018-9445

CVE-2018-9445 describes a path traversal/privilege escalation chain in Android. The root issue: readMetadata in Utils.cpp can be fed a crafted label via blkid output that Vold uses to build a mount path, allowing a USB mass storage device to influence the path used for mounting (UUID/TYPE) and en...

CVE-2018-9561

CVE-2018-9561 affects Android components: in llcp_util_parse_connect of llcp_util.cc there is a missing bounds check that enables an out-of-bounds read leading to local information disclosure. Affected products include Android 7.0 through 9 (per NVD/Red Hat/CVE listings); exploitation requires us...

CVE-2020-0450

CVE-2020-0450 affects Android via rw_i93_sm_format in rw_i93.cc, where an out-of-bounds read can arise from uninitialized data. This could enable remote information disclosure over NFC with no additional execution privileges; exploitation requires user interaction. Affected Android versions inclu...

CVE-2021-0680

CVE-2021-0680 : Affects Android on MediaTek components (System properties) where a missing permission check in system properties could allow local information disclosure without user interaction. Impact: disclosure of sensitive data on the device. Root cause per connected sources: insufficient ac...

CVE-2021-39810

CVE-2021-39810 affects Android’s NFC/payment stack (CardEmulationManager.verifyDefaults). The root cause is a missing permission check that can allow a third-party app to be set as the default contactless payment app without user consent. This could enable local elevation of privilege, with explo...

CVE-2022-20036

CVE-2022-20036 affects the ion driver and is caused by an incorrect bounds check, leading to local information disclosure with no additional privileges required and no user interaction. The impact is described as partial confidentiality loss, without exploitation details provided. A patch/mitigat...

CVE-2022-20042

CVE-2022-20042 affects Bluetooth with incorrect error handling that may cause local information disclosure. Exploitation requires local access; no user interaction is needed. Documents consistently cite a patch/issue identifier ALPS06108487. No additional exploit details or affected product/versi...

CVE-2022-20101

CVE-2022-20101 describes a path traversal vulnerability in the aee daemon that can cause local information disclosure without requiring user interaction. The underlying issue is a path traversal flaw, enabling disclosure of sensitive data with local access. The exposure is supported by multiple s...

CVE-2022-20384

CVE-2022-20384 is referenced in Pixel security bulletin as an Elevation of Privilege in the Modem component affecting Google Pixel devices (Modem stack). The bulletin groups it under Pixel issues and indicates affected devices receive patches at the 2022-08-05 security level. No explicit root-cau...

CVE-2022-20510

CVE-2022-20510 affects Android 13 (Pixel devices) via a permissions bypass in DevicePolicyManagerService.getNearbyNotificationStreamingPolicy, enabling local information disclosure about other users’ notification streaming policy with no extra privileges or user interaction. The security entry no...

CVE-2022-22272

CVE-2022-22272 affects TelephonyManager in Samsung/Android prior to the SMR Jan-2022 Release 1. The issue is improper authorization that allows an attacker to obtain the IMSI without READ_PRIVILEGED_PHONE_STATE permission. Root cause is insufficient access control in TelephonyManager’s handling o...

CVE-2023-20844

CVE-2023-20844 affects the imgsys_cmdq component in MediaTek devices. The issue is an out-of-bounds read caused by missing valid range checking, potentially enabling local information disclosure with system-execution privileges required. Exploitation requires user interaction. The vulnerability i...

CVE-2023-21178

CVE-2023-21178 concerns Android 13 where the issue arises in the installKey function of KeyUtil.cpp. A race condition could cause a possible failure of file encryption, leading to local information disclosure with System privileges required. Exploitation reportedly does not require user interacti...

CVE-2023-32819

CVE-2023-32819 affects MediaTek components (display path) with a missing bounds check, causing information disclosure that could lead to local escalation of privileges (System level) without user interaction. The issue is documented under patch ALPS07993705 and is referenced across multiple feeds...

CVE-2023-35659

CVE-2023-35659 affects the kernel through the DevmemIntChangeSparse function in devicemem_server.c. The connected sources describe a logic error that can cause arbitrary code execution, enabling local escalation of privilege with no additional privileges or user interaction required. Multiple fee...

CVE-2024-20010

The CVE-2024-20010 entry describes a MediaTek vulnerability in the keyInstall module caused by type confusion, enabling local privilege escalation to SYSTEM without user interaction. Patch ALPS08358560 (Issue ALPS08358560) is referenced as the fix. Connected documents corroborate the local-privil...

CVE-2024-25986

A logic error in the ppmp_unprotect_buf function within the drm_fw.c file allows for the compromise of protected memory. This vulnerability can lead to a local escalation of privilege to the TEE (Trusted Execution Environment) without requiring additional execution privileges or user interaction....

CVE-2024-34724

CVE-2024-34724 describes a race condition in the kernel function _UnrefAndMaybeDestroy (pmr.c) that can enable arbitrary code execution and local escalation of privilege without user interaction. The vulnerability is rooted in race timing within memory/reference handling, allowing a local attacke...

CVE-2015-3103

CVE-2015-3103 concerns Adobe Flash Player and is supported by connected sources that identify it as a race condition leading to a use-after-free. The issue affects Flash Player on Windows, OS X, and Linux, with the vulnerability triggered by a COM object initialization/deinitialization sequence t...

CVE-2015-5580

CVE-2015-5580 corresponds to a memory corruption vulnerability in Adobe Flash Player and related AIR components, reported as APSB15-23. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X, and before 11.2.202.521 on Linux, plus Adobe AIR before 19.0...

CVE-2015-5582

Summary: CVE-2015-5582 affects Adobe Flash Player and Adobe AIR components. A memory corruption vulnerability in Flash Player allows remote code execution or denial of service via parsing crafted media (SWF/MP4) payloads, with exploitable conditions indicated by related advisories. Affected produ...

CVE-2017-0752

CVE-2017-0752 is an elevation-of-privilege issue in the Android framework (windowmanager) affecting Android 4.4.4 through 7.1.2. Root cause: privilege escalation via windowmanager overlay/toast-style interaction (no exploit details provided in the sources). Impact is described as high (confidenti...

CVE-2018-9341

A remote code execution vulnerability exists in the Media framework component of Google Android . The flaw is caused by a missing bounds check in the impeg2d_mc_fullx_fully function of impeg2d_mc.c, leading to an out-of-bounds write . An attacker can exploit this by using a specially crafted file...

CVE-2019-2011

CVE-2019-2011 affects Android 8.0–9, with a vulnerable code path in Parcel.cpp: readNullableNativeHandleNoDup, where a missing bounds check can cause an out-of-bounds write. This yields local escalation of privilege with no extra privileges or user interaction required. Impact is described as EoP...

CVE-2019-9423

The CVE-2019-9423 entry concerns an out-of-bounds write in OpenCV when using libpng, caused by a missing bounds check. Impact is local privilege escalation on Android 10, with no user interaction required. Public details specify the affected product as Android 10 (Android ID A-110986616); there i...

CVE-2020-0253

CVE-2020-0253 is a memory corruption (use-after-free) vulnerability in the MediaTek Multimedia Processing Driver for Android, classified as Elevation of Privilege (EoP) with High impact. Affected: Android devices using MediaTek multimedia driver; root cause: use-after-free leading to unauthorized...

CVE-2021-0636

CVE-2021-0636: Memory corruption when extracting an incorrectly formatted AVI file could crash playback and logs, potentially enabling a malicious actor to compromise user rights on Android 10. Connected sources (Red Hat, NVD, CVE listings) consistently reference Android 10 as the affected platfo...

CVE-2021-0951

CVE-2021-0951 concerns an integer overflow in the DevmemIntHeapAcquire function (Android-related). The vulnerability could enable arbitrary code execution and local privilege escalation without extra privileges or user interaction. Public details in the provided documents identify the affected st...

CVE-2022-20107

CVE-2022-20107 affects the subtitle service and is caused by an integer overflow that can crash the application, enabling local denial of service with SYSTEM privileges. The vulnerability is exploitable locally (attack vector: LOCAL, attack complexity: LOW) and does not require user interaction. ...

CVE-2022-20520

CVE-2022-20520 affects Android 13 devices and describes a tapjacking/overlay vulnerability in the onCreate path of various files, enabling local privilege escalation and potential denial of service with user privileges and no user interaction required. The issue is documented across multiple feed...

CVE-2022-20607

CVE-2022-20607 affects Google Pixel devices via the Pixel cellular firmware. The issue is a missing bounds check that enables an out-of-bounds write, which could lead to remote code execution without user interaction, contingent on LTE authentication being present. The vulnerability is described ...

CVE-2022-24932

The CVE-2022-24932 entry concerns Samsung Setup wizard: an Improper Protection of Alternate Path vulnerability in the Setup wizard process allows a physical attacker to install packages before the wizard completes. Affected versions are Setup wizard versions prior to SMR Mar-2022 Release 1. The u...

CVE-2022-39132

CVE-2022-39132 describes a probable out-of-bounds write in the kernel camera driver caused by a missing bounds check, enabling a local denial of service. The affected component is the camera driver; the root cause is an unchecked input/buffer access leading to memory write beyond bounds. The impa...

CVE-2022-48456

CVE-2022-48456 is described as an out-of-bounds write in the camera driver that can lead to local denial of service with System execution privileges. Multiple connected records (NVD entry; Red Hat advisory; EU/OSV mentions) identify this as involving an Unisoc kernel/component issue, specifically...

CVE-2023-20725

CVE-2023-20725 affects MediaTek chip preloader: an out-of-bounds write caused by a missing bounds check can lead to local escalation of privilege with System execution privileges required. Exploitation requires no user interaction. Affected devices/versions include MT6880, MT6890, MT6980, and MT6...

CVE-2023-20982

CVE-2023-20982 affects Android 13 and involves a missing bounds check in the Bluetooth stack (btm_read_tx_power_complete in btm_acl.cc), causing a possible out-of-bounds read that can disclose local information. Exploitation would require System-level privileges with no user interaction, and is d...

CVE-2023-20983

CVE-2023-20983 affects Android (Android-13) in the Bluetooth stack: in btm_ble_rand_enc_complete (btm_ble.cc) there is an out-of-bounds read due to a missing bounds check, enabling local information disclosure with system privileges. Exploitation is reported as local (AV:L, AC:L, PR:H, UI:N) with...

CVE-2023-21166

CVE-2023-21166: Use-after-free in RGXBackingZSBuffer (rgxta3d.c) of the PowerVR GPU driver can enable arbitrary code execution and local kernel privilege escalation without extra user interaction. Public details across the connected entries confirm the issue and its impact (no explicit exploit sp...

CVE-2023-48340

CVE-2023-48340 is linked to Unisoc Android video decoder and corresponds to an out-of-bounds write caused by improper input validation. The result is local denial of service with no extra privileges required. Publicly detailed exploit vectors or fixes are not provided in the connected documents; ...