CVE-2015-3100

Adobe Flash Player and related components are affected by a stack-based buffer overflow (CVE-2015-3100) that enables arbitrary code execution. Affected product/version range includes Flash Player prior to 13.0.0.292 and 14.x through 18.x prior to 18.0.0.160 on Windows/macOS, and prior to 11.2.202...

CVE-2015-3105

CVE-2015-3105 affects Adobe Flash Player and related AIR/SDK components. The vulnerability enables arbitrary code execution or memory-corruption-induced DoS via unspecified vectors in Flash Player and AIR across Windows, macOS, Linux, and Android, with affected versions listed in the initial desc...

CVE-2021-0878

The CVE-2021-0878 issue affects the PowerVR PVRSRVBridgeServerSyncGetStatus path in the PVRSRV kernel driver. The root cause is a missing size check that can trigger an integer overflow, enabling out-of-bounds heap access. This could enable local escalation of privilege without additional executi...

CVE-2021-0882

The CVE-2021-0882 issue affects Android devices using the Imagination Technologies PowerVR PowerVR kernel driver (PVRSRVBridgeRGXKickSync). The root cause is a missing size check that enables an integer overflow, leading to out-of-bounds heap access. This can allow local escalation of privilege w...

CVE-2021-0885

CVE-2021-0885 affects the PowerVR kernel driver (PVRSRVBridgeSyncPrimOpTake). The issue is a missing size check that enables an integer overflow, causing out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed, and exploitation is...

CVE-2021-39746

CVE-2021-39746 affects Android 12L Framework, specifically a vulnerability in PermissionController caused by an unsafe PendingIntent. This could lead to local escalation of privilege with user execution privileges needed and no user interaction required, per the CVE description. Red Hat and Andro...

CVE-2022-20042

CVE-2022-20042 affects Bluetooth with incorrect error handling that may cause local information disclosure. Exploitation requires local access; no user interaction is needed. Documents consistently cite a patch/issue identifier ALPS06108487. No additional exploit details or affected product/versi...

CVE-2022-20196

The CVE-2022-20196 issue affects Android 12L’s gallery3d and Photos. It describes a permission bypass due to a confused deputy, enabling local information disclosure without extra execution privileges. Exploitation is reported to require user interaction. The Pixel update bulletin lists CVE-2022-...

CVE-2022-20201

The CVE-2022-20201 issue affects Android's InstalldNativeService.cpp, specifically the getAppSize function, where a missing bounds check can cause an out-of-bounds read. This enables local escalation of privileges with System execution privileges implied, and exploitation does not require user in...

CVE-2022-20377

CVE-2022-20377 affects Android’s keymaster_ipc.cpp, enabling an attacker to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This configuration flaw can lead to local elevation of privilege with no additional execution privileges required and without user interaction. Public r...

CVE-2022-20510

CVE-2022-20510 affects Android 13 (Pixel devices) via a permissions bypass in DevicePolicyManagerService.getNearbyNotificationStreamingPolicy, enabling local information disclosure about other users’ notification streaming policy with no extra privileges or user interaction. The security entry no...

CVE-2022-20537

CVE-2022-20537 affects Android 13. In WifiScanModeActivity.java, the createDialog flow lacks a permission check, enabling a Guest user to enable location-sensitive settings and perform local privilege escalation without additional execution privileges or user interaction. Public exploitation deta...

CVE-2022-23428

CVE-2022-23428 : An improper boundary check in the eden_runtime HAL service before SMR Feb-2022 Release 1 allows arbitrary memory write and code execution. The vulnerability is documented across multiple sources (NVD, CNVD, Red Hat, etc.) and is associated with Google Android. Affected component:...

CVE-2022-23429

CVE-2022-23429 describes an improper boundary check in the Android audio HAL service prior to SMR Feb-2022 Release 1, allowing local attackers to read invalid memory and cause an application crash. In the provided connected records, the vulnerability is documented across multiple sources (NVD, Re...

CVE-2022-2985

CVE-2022-2985 : In the Android music service, a missing permission check could allow a local attacker to elevate privileges in the contacts service without any additional execution privileges. The vulnerability is described consistently across sources (NVD/CVE entry, CNVD, CNSC/NCSC advisories, O...

CVE-2022-48454

CVE-2022-48454 concerns the wifi service, where a missing bounds check can cause an out-of-bounds write leading to local denial of service without extra privileges. The issue is supported by multiple sources in the provided set (NVD entry reproduces the description and CVSS metrics; Red Hat advis...

CVE-2023-40141

The CVE-2023-40141 issue affects the temp_residency_name_store function in thermal_metrics.c, where a missing bounds check enables an out-of-bounds write. This is described as a potential local privilege escalation with no additional execution privileges required and no user interaction needed. C...

CVE-2024-29743

CVE-2024-29743 describes a potential out-of-bounds write in the function tmu_set_temp_lut of tmu.c, requiring local access with no user interaction. The vulnerability could enable a local elevation of privilege, as the write occurs due to a missing bounds check. Across multiple sources (NVD, Red ...

CVE-2024-31333

The CVE-2024-31333 issue affects Google Android kernel code, specifically the MMU_AllocLevel path in mmu_common.c, where an integer overflow can lead to arbitrary code execution and local escalation of privilege without user interaction. Multiple connected sources (NVD, Red Hat, CNVD, CVE listing...

CVE-2024-34725

The CVE-2024-34725 entry describes a race condition in DevmemIntUnexportCtx of devicemem_server.c that can allow arbitrary code execution and local privilege escalation in the kernel, with no extra privileges or user interaction required. Connected records (Red Hat, NVD, CVE lists, OSV) confirm t...

CVE-2024-34748

Possible use-after-free in DevmemXReservationPageAddress of devicemem_server.c due to improper casting, enabling local kernel privilege escalation without extra privileges or user interaction. Affected: Linux kernel component described in multiple sources (CVE-2024-34748). Impact: local EoP with ...

CVE-2024-47017

CVE-2024-47017 affects the ufshc_scsi_cmd function in ufs.c, with a stack variable use-after-free leading to local escalation of privilege. The vulnerability description across Red Hat, NVD, CVE lists, and OSV entries consistently state that no further user interaction is required, and exploitati...

CVE-2015-9004

CVE-2015-9004 affects the Linux kernel up to version 3.18 (pre-3.19). The flaw is in kernel/events/core.c where improper handling of counter grouping enables local privilege escalation via crafted apps, involving perf_pmu_register and perf_event_open. The impact is local Privilege Escalation with...

CVE-2018-9445

CVE-2018-9445 describes a path traversal/privilege escalation chain in Android. The root issue: readMetadata in Utils.cpp can be fed a crafted label via blkid output that Vold uses to build a mount path, allowing a USB mass storage device to influence the path used for mounting (UUID/TYPE) and en...

CVE-2019-9423

The CVE-2019-9423 entry concerns an out-of-bounds write in OpenCV when using libpng, caused by a missing bounds check. Impact is local privilege escalation on Android 10, with no user interaction required. Public details specify the affected product as Android 10 (Android ID A-110986616); there i...

CVE-2020-0123

CVE-2020-0123 describes a possible out-of-bounds write caused by an incorrect bounds check in the Android TV sound driver. The vulnerability affects Android TV components, with the root cause identified as a bounds-check fault in the sound subsystem, potentially enabling out-of-bounds writes. The...

CVE-2020-0339

CVE-2020-0339 is confirmed as an out-of-bounds read caused by a missing bounds check, associated with Android/SoC component A-162980705. OSV entries explicitly describe the issue as an out-of-bounds read (ASB-A-162980705) and (ASB-A-162980455). Exploitation status is not provided in the supplied ...

CVE-2020-0342

CVE-2020-0342 is an Android vulnerability described as an out-of-bounds write caused by an incorrect bounds check. Connected sources show this entry associated with Android components including MediaTek ATF and Qualcomm closed-source components, with patches issued in the Android September 2020 s...

CVE-2020-0447

CVE-2020-0447 is described in connected documents as an out-of-bounds write caused by a missing bounds check, linked to Android SoC component A-168251617. The OSV entry ASB-A-168251617 explicitly states the issue as an out-of-bounds write; other sources (NVD, Red Hat, CVE listings) reflect this d...

CVE-2021-25477

CVE-2021-25477 affects Mediatek RRC Protocol stack; improper error handling could cause a modem crash and remote DoS. Root cause described as error handling weakness in the Mediatek RRC stack prior to SMR Oct-2021 Release 1. Documented impact is network-exposed denial of service with potential av...

CVE-2022-20152

CVE-2022-20152 affects the TitanM chip in Android kernel space, describing an out-of-bounds write caused by a missing bounds check that enables local escalation of privileges to System with no user interaction required. Public details on affected patch level or remediation are not provided in the...

CVE-2022-20167

CVE-2022-20167 is listed in the Google Pixel security bulletin as a modem component Elevation of Privilege vulnerability (High) affecting Pixel devices. The connected Pixel bulletin entry confirms the issue type and severity but does not provide explicit exploit details in the available documents...

CVE-2022-20190

Technical details for CVE-2022-20190 are not publicly available in the provided documents. No concrete information on affected components, root cause, impact, or fixes is present. Monitor for updates.

CVE-2022-20191

CVE-2022-20191 is a Google Pixel modem vulnerability described as a Remote Code Execution issue in the Pixel modem, affecting Android kernel components. It is rated CRITICAL (CVSSv3.1: 9.8) with network exploitation and no required user interaction. The Pixel Update Bulletin assigns a fix via pat...

CVE-2022-20195

CVE-2022-20195 concerns the Android keystore library with an insecure deserialization flaw that can cause local denial of service. The description across sources notes the issue allows DoS with user interaction and affects Android 12L; exploitation requires user interaction while the Pixel bullet...

CVE-2022-20378

CVE-2022-20378 affects Android kernel and Pixel modem. The Pixel security bulletin lists it under the Kernel/Modem category as an Elevation of Privilege (EoP) issue with “Modem” as the component and indicates a high-severity impact, corroborated by NVD’s CVSS v3.1 base score of 9.8 (CRITICAL) wit...

CVE-2022-20405

CVE-2022-20405 affects the Android kernel/modem stack used by Google Pixel devices, described as a Modem Elevation of Privilege vulnerability. Public details indicate a zero-click style chain that could downgrade the device’s cellular modem to 2G and potentially allow takeover of the handset via ...

CVE-2022-20528

Summary: CVE-2022-20528 affects Android-13 via a flaw in the FindParam path of HevcUtils.cpp causing an out-of-bounds read due to a missing bounds check. This can enable local privilege escalation with no additional execution privileges and no user interaction is required. The vulnerability is do...

CVE-2022-21754

CVE-2022-21754 affects MediaTek WLAN driver and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local escalation of privilege with System execution privileges required and no user interaction needed. The remediation referenced is Patch ID ALPS06535953 / I...

CVE-2022-25821

CVE-2022-25821 affects Samsung’s Shannon baseband (SMS handling). The vulnerability arises from improper use of the SMS buffer pointer, enabling an out-of-bounds read. Public sources describe impact as read access to memory due to buffer mismanagement in Shannon baseband prior to SMR Mar-2022 Rel...

CVE-2022-47470

The CVE-2022-47470 issue concerns the ext4fsfilter driver and is caused by a missing bounds check that leads to an out-of-bounds read. The vulnerability allows local denial of service with SYSTEM privileges required, as described in multiple sources (e.g., Red Hat, NVD, CVE lists). Affected compo...

CVE-2022-48456

CVE-2022-48456 is described as an out-of-bounds write in the camera driver that can lead to local denial of service with System execution privileges. Multiple connected records (NVD entry; Red Hat advisory; EU/OSV mentions) identify this as involving an Unisoc kernel/component issue, specifically...

CVE-2023-20621

CVE-2023-20621 affects tinysys and describes an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation with System privileges and no user interaction required. Public details indicate a patch ID ALPS07664755 (Issue ALPS07664755) exists, but the exact vulnerable ...

CVE-2023-20844

CVE-2023-20844 affects the imgsys_cmdq component in MediaTek devices. The issue is an out-of-bounds read caused by missing valid range checking, potentially enabling local information disclosure with system-execution privileges required. Exploitation requires user interaction. The vulnerability i...

CVE-2023-20982

CVE-2023-20982 affects Android 13 and involves a missing bounds check in the Bluetooth stack (btm_read_tx_power_complete in btm_acl.cc), causing a possible out-of-bounds read that can disclose local information. Exploitation would require System-level privileges with no user interaction, and is d...

CVE-2023-48342

CVE-2023-48342 affects the media service and describes a potential out-of-bounds write caused by a missing bounds check. The impact is local denial of service with System execution privileges required. The vulnerability is rated MEDIUM (CVSS 3.1: 4.4), with a Local attack vector and High availabi...

CVE-2024-20010

The CVE-2024-20010 entry describes a MediaTek vulnerability in the keyInstall module caused by type confusion, enabling local privilege escalation to SYSTEM without user interaction. Patch ALPS08358560 (Issue ALPS08358560) is referenced as the fix. Connected documents corroborate the local-privil...

CVE-2024-27208

CVE-2024-27208 describes an out-of-bounds write due to a missing bounds check, enabling local privilege escalation with no user interaction. Public sources confirm this vulnerability is categorized as Elevation of Privilege (EoP) and listed under the Pixel security bulletin with subcomponent ACPM...

CVE-2024-27209

CVE-2024-27209 corresponds to a local elevation-of-privilege issue described as a possible out-of-bounds write caused by a heap buffer overflow. Public sources indicate this vulnerability affects Google Pixel/Android modem components and can be exploited with no user interaction to achieve privil...

CVE-2024-32897

CVE-2024-32897 involves an out-of-bounds read in ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() within protocolsmsadapter.cpp. The issue arises from a missing bounds check, enabling a possible information disclosure; exploitability is network-based with no user interaction and could lead to baseb...