CVE-2024-27207

CVE-2024-27207 affects Android/Google Pixel devices and is described as an elevation-of-privilege issue caused by exported broadcast receivers that can bypass broadcast protection. The Red Hat/NVD entries reiterate the export receivers vulnerability with the same description, and the Android Pixe...

CVE-2024-34748

Possible use-after-free in DevmemXReservationPageAddress of devicemem_server.c due to improper casting, enabling local kernel privilege escalation without extra privileges or user interaction. Affected: Linux kernel component described in multiple sources (CVE-2024-34748). Impact: local EoP with ...

CVE-2024-44094

The CVE affects the function ppmp_protect_mfcfw_buf in code/drm_fw.c , with a root cause of improper input validation that can cause memory corruption . This leads to a local privilege escalation vulnerability with no additional execution privileges required and without user interaction. Several ...

CVE-2015-8967

From connected documents: CVE-2015-8967 affects the Linux kernel's arch/arm64/kernel/sys.c prior to version 4.0. Local users with write access can bypass the kernel’s strict page permissions and modify the system-call table to gain privileges, implying local privilege escalation. A patch/commit a...

CVE-2018-9561

CVE-2018-9561 affects Android components: in llcp_util_parse_connect of llcp_util.cc there is a missing bounds check that enables an out-of-bounds read leading to local information disclosure. Affected products include Android 7.0 through 9 (per NVD/Red Hat/CVE listings); exploitation requires us...

CVE-2020-27067

CVE-2020-27067 affects the Android kernel’s l2tp subsystem, where a race condition can cause a use-after-free leading to local privilege escalation. Exploitation is described as requiring local access with no user interaction. The provided documents specify the affected product area and the impac...

CVE-2021-0442

CVE-2021-0442 affects Android 11 in the Framework component, specifically in updateInfo of android_hardware_input_InputApplicationHandle.cpp. The issue is a use-after-free that can control code flow, enabling local elevation of privilege with no additional execution privileges required. Exploitat...

CVE-2021-0636

CVE-2021-0636: Memory corruption when extracting an incorrectly formatted AVI file could crash playback and logs, potentially enabling a malicious actor to compromise user rights on Android 10. Connected sources (Red Hat, NVD, CVE listings) consistently reference Android 10 as the affected platfo...

CVE-2021-0882

The CVE-2021-0882 issue affects Android devices using the Imagination Technologies PowerVR PowerVR kernel driver (PVRSRVBridgeRGXKickSync). The root cause is a missing size check that enables an integer overflow, leading to out-of-bounds heap access. This can allow local escalation of privilege w...

CVE-2021-0951

CVE-2021-0951 concerns an integer overflow in the DevmemIntHeapAcquire function (Android-related). The vulnerability could enable arbitrary code execution and local privilege escalation without extra privileges or user interaction. Public details in the provided documents identify the affected st...

CVE-2022-20033

CVE-2022-20033 affects the camera driver in MediaTek-based devices. The root cause is an incorrect bounds check that enables an out-of-bounds read, leading to local information disclosure and potential System-level execution privileges. Exploitation reportedly does not require user interaction. A...

CVE-2022-20152

CVE-2022-20152 affects the TitanM chip in Android kernel space, describing an out-of-bounds write caused by a missing bounds check that enables local escalation of privileges to System with no user interaction required. Public details on affected patch level or remediation are not provided in the...

CVE-2022-20190

Technical details for CVE-2022-20190 are not publicly available in the provided documents. No concrete information on affected components, root cause, impact, or fixes is present. Monitor for updates.

CVE-2022-20370

CVE-2022-20370 ties to Android kernel/modem firmware with Android bug ID A-215730643. Pixel bulletin classifies it under Modem with type ID and Moderate severity; NVD describes a kernel-related issue affecting Android kernel (CVSSv3.1: 7.5, Network exploit, no user interaction). Some connected so...

CVE-2022-20520

CVE-2022-20520 affects Android 13 devices and describes a tapjacking/overlay vulnerability in the onCreate path of various files, enabling local privilege escalation and potential denial of service with user privileges and no user interaction required. The issue is documented across multiple feed...

CVE-2022-20535

CVE-2022-20535 affects Android 13 via a side-channel in WifiManager.registerLocalOnlyHotspotSoftApCallback that can reveal whether an app is installed without query permissions, enabling local information disclosure. Exploitation requires local access; no user interaction is needed. The issue is ...

CVE-2022-21750

CVE-2022-21750 affects MediaTek WLAN drivers and describes an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation with System execution privileges required. The vulnerability is exploitable without user interaction, per the description. Connected sources conf...

CVE-2022-23428

CVE-2022-23428 : An improper boundary check in the eden_runtime HAL service before SMR Feb-2022 Release 1 allows arbitrary memory write and code execution. The vulnerability is documented across multiple sources (NVD, CNVD, Red Hat, etc.) and is associated with Google Android. Affected component:...

CVE-2022-23429

CVE-2022-23429 describes an improper boundary check in the Android audio HAL service prior to SMR Feb-2022 Release 1, allowing local attackers to read invalid memory and cause an application crash. In the provided connected records, the vulnerability is documented across multiple sources (NVD, Re...

CVE-2022-2985

CVE-2022-2985 : In the Android music service, a missing permission check could allow a local attacker to elevate privileges in the contacts service without any additional execution privileges. The vulnerability is described consistently across sources (NVD/CVE entry, CNVD, CNSC/NCSC advisories, O...

CVE-2022-42505

CVE-2022-42505 arises from an out-of-bounds write in ProtocolMiscBuilder::BuildSetSignalReportCriteria within the Android kernel’s protocolmiscbuilder.cpp. The description indicates an incorrect bounds check allows a local escalation of privilege with System execution privileges required; exploit...

CVE-2022-42527

CVE-2022-42527 involves a crash in the Android kernel due to a missing null check in the function cd_SsParseMsg of cd_SsCodec.c. The issue could allow remote denial of service without requiring privileges or user interaction. The available sources consistently describe the affected component as p...

CVE-2022-42530

CVE-2022-42530 affects Pixel firmware, where an out-of-bounds read results from a missing bounds check. The vulnerability enables local information disclosure with System-level privileges, and does not require user interaction. The described impact and conditions are consistent with Android Pixel...

CVE-2022-47470

The CVE-2022-47470 issue concerns the ext4fsfilter driver and is caused by a missing bounds check that leads to an out-of-bounds read. The vulnerability allows local denial of service with SYSTEM privileges required, as described in multiple sources (e.g., Red Hat, NVD, CVE lists). Affected compo...

CVE-2022-48456

CVE-2022-48456 is described as an out-of-bounds write in the camera driver that can lead to local denial of service with System execution privileges. Multiple connected records (NVD entry; Red Hat advisory; EU/OSV mentions) identify this as involving an Unisoc kernel/component issue, specifically...

CVE-2023-20654

CVE-2023-20654 affects MediaTek keyinstall: an out-of-bounds write due to a missing bounds check can cause local elevation of privilege with system execution privileges. No user interaction is required. Affected item is keyinstall (MediaTek ALPS family); patch ALPS07628168 is referenced, with Iss...

CVE-2023-20734

CVE-2023-20734 affects the vcu module in MediaTek chips. The issue is described as an out-of-bounds write due to a missing bounds check, potentially enabling local escalation of privilege with SYSTEM privileges and no user interaction required. A patch is available (ALPS07645149; ALPS07645184). C...

CVE-2023-20849

The CVE-2023-20849 vulnerability is in the imgsys_cmdq component and is caused by missing valid range checking, leading to a use-after-free that can enable local privilege escalation with SYSTEM privileges. Exploitation requires user interaction. Affected context references MediaTek-related discl...

CVE-2023-21061

CVE-2023-21061 affects the Android kernel (Pixel devices). The connected Pixel bulletin entry indicates this issue is a DoS vulnerability with a Moderate impact in the Wifi subcomponent. No exploitation/details are provided beyond the classification. A fix is indicated via the Pixel security patc...

CVE-2023-32818

MediaTek vdec component is affected by CVE-2023-32818 due to a type confusion that can trigger an out-of-bounds write, enabling local escalation of privilege with SYSTEM-level privileges required. Exploitation is reported as not needing user interaction. The patch IDs provided are ALPS08163896 an...

CVE-2024-20091

CVE-2024-20091 affects MediaTek’s vdec component in the ALPS platform (ALPS09028313) due to a missing bounds check, enabling an out-of-bounds read that could lead to local information disclosure with system execution privileges and no user interaction required. Patch and issue IDs (MSV-1701) are ...

CVE-2024-27213

The CVE-2024-27213 issue is a use-after-free in BroadcastSystemMessage within servicemgr.cpp that could allow Remote Code Execution, causing local elevation of privilege with no user interaction required. The available documents confirm the vulnerable component and the general impact (RCE and LPE...

CVE-2024-34726

The CVE-2024-34726 issue is in PVRSRV_MMap (pvr_bridge_k.c) of the PVR bridge kernel module. A logic error in PVRSRV_MMap can allow arbitrary code execution, enabling local kernel escalation of privilege with no extra execution privileges and without user interaction. The available documents do n...

CVE-2024-44096

CVE-2024-44096 affects Google Pixel devices (Android) and is caused by an insecure default value that enables an arbitrary read, potentially leading to local information disclosure with system execution privileges. Exploitation does not require user interaction. The issue is listed in the Pixel s...

CVE-2024-47039

CVE-2024-47039 describes an out-of-bounds read in the BootControl.cpp isSlotMarkedSuccessful path of the android.hardware.boot.IBootControl default service. The underlying issue is a missing bounds check in BootControl.cpp, enabling local information disclosure without additional execution privil...

CVE-2021-0680

CVE-2021-0680 : Affects Android on MediaTek components (System properties) where a missing permission check in system properties could allow local information disclosure without user interaction. Impact: disclosure of sensitive data on the device. Root cause per connected sources: insufficient ac...

CVE-2021-0878

The CVE-2021-0878 issue affects the PowerVR PVRSRVBridgeServerSyncGetStatus path in the PVRSRV kernel driver. The root cause is a missing size check that can trigger an integer overflow, enabling out-of-bounds heap access. This could enable local escalation of privilege without additional executi...

CVE-2021-39746

CVE-2021-39746 affects Android 12L Framework, specifically a vulnerability in PermissionController caused by an unsafe PendingIntent. This could lead to local escalation of privilege with user execution privileges needed and no user interaction required, per the CVE description. Red Hat and Andro...

CVE-2022-20036

CVE-2022-20036 affects the ion driver and is caused by an incorrect bounds check, leading to local information disclosure with no additional privileges required and no user interaction. The impact is described as partial confidentiality loss, without exploitation details provided. A patch/mitigat...

CVE-2022-20041

CVE-2022-20041 concerns the Bluetooth subsystem with a missing permission check that can enable local privilege escalation without user interaction. The available reports consistently describe a local escalation of privilege, with the exploit requiring no extra execution privileges. The vulnerabi...

CVE-2022-21759

CVE-2022-21759 describes an out-of-bounds write in the power service caused by a missing bounds check, enabling local privilege escalation to System privileges without user interaction. Multiple sources (NVD, Red Hat, PRION, CVE lists) confirm the issue and states a patch is available (Patch ID A...

CVE-2022-24932

The CVE-2022-24932 entry concerns Samsung Setup wizard: an Improper Protection of Alternate Path vulnerability in the Setup wizard process allows a physical attacker to install packages before the wizard completes. Affected versions are Setup wizard versions prior to SMR Mar-2022 Release 1. The u...

CVE-2022-47486

CVE-2022-47486 affects the ext4fsfilter driver and is caused by a missing bounds check that enables an out‑of‑bounds read. The consequence is a possible local denial of service with System privileges required. Public details in the provided documents consistently describe the issue as a local DoS...

CVE-2023-20832

The CVE-2023-20832 entry relates to gps with a potential out-of-bounds write due to a missing bounds check. Impact is local privilege escalation with System privileges required and no user interaction. A fix is referenced as Patch ID ALPS08014144 / Issue ID ALPS08013530; apply the patch to mitiga...

CVE-2023-35659

CVE-2023-35659 affects the kernel through the DevmemIntChangeSparse function in devicemem_server.c. The connected sources describe a logic error that can cause arbitrary code execution, enabling local escalation of privilege with no additional privileges or user interaction required. Multiple fee...

CVE-2023-40141

The CVE-2023-40141 issue affects the temp_residency_name_store function in thermal_metrics.c, where a missing bounds check enables an out-of-bounds write. This is described as a potential local privilege escalation with no additional execution privileges required and no user interaction needed. C...

CVE-2024-20093

CVE-2024-20093 affects MediaTek vdec in MediaTek chipsets. Root cause: missing bounds check causing an out-of-bounds read, leading to local information disclosure with system execution privileges needed; no user interaction required. Patch: ALPS09028313 (MSV-1699). Connected sources (Red Hat/NVD)...

CVE-2024-34729

CVE-2024-34729 is linked to PowerVR-GPU in the Android ecosystem. The connected sources describe a logic error that could enable arbitrary code execution, resulting in local privilege escalation in kernel-related contexts. Exploitation details are not provided in the documents, and a specific pat...

CVE-2024-43088

CVE-2024-43088 describes a local privilege escalation in Android involving multiple functions in AppInfoBase.java where a missing permission check allows manipulating another user’s app permission settings. Exploitation requires local access and does not need user interaction; no public exploit d...

CVE-2024-47040

CVE-2024-47040 is a Use-After-Free in the Android Android Pixel stack involving the android.hardware.radio.sap.ISap/slot2 service. Root cause: a logic error leads to UAF, enabling local Elevation of Privilege with no user interaction. Documents provide no exploitation details or specific patch/ve...