CVE-2023-32818

MediaTek vdec component is affected by CVE-2023-32818 due to a type confusion that can trigger an out-of-bounds write, enabling local escalation of privilege with SYSTEM-level privileges required. Exploitation is reported as not needing user interaction. The patch IDs provided are ALPS08163896 an...

CVE-2023-48340

CVE-2023-48340 is linked to Unisoc Android video decoder and corresponds to an out-of-bounds write caused by improper input validation. The result is local denial of service with no extra privileges required. Publicly detailed exploit vectors or fixes are not provided in the connected documents; ...

CVE-2023-48342

CVE-2023-48342 affects the media service and describes a potential out-of-bounds write caused by a missing bounds check. The impact is local denial of service with System execution privileges required. The vulnerability is rated MEDIUM (CVSS 3.1: 4.4), with a Local attack vector and High availabi...

CVE-2024-22009

A security vulnerability exists in the init_data function of a Google Pixel component due to a missing bounds check . This flaw can lead to an out-of-bounds write , potentially allowing for local escalation of privilege without requiring additional execution privileges or user interaction. While ...

CVE-2024-43081

The CVE-2024-43081 issue affects Google Android and is tied to the function installExistingPackageAsUser in InstallPackageHelper.java. The root cause is a logic error that allows a carrier restriction bypass, enabling local elevation of privilege with no extra execution privileges and no user int...

CVE-2020-0002

CVE-2020-0002 affects Android Media framework (ih264d_init_decoder in ih264d_api.c) with a use-after-free causing an out-of-bounds write, enabling remote code execution. Impacted Android versions: 8.0–10. Exploitation requires user interaction or crafted media; CVSS indicates Network access, no p...

CVE-2020-0294

CVE-2020-0294 affects Android; in WallpaperManagerService.bindWallpaperComponentLocked there is a permission bypass caused by an unsafe PendingIntent. The issue allows local elevation of privilege with user privileges required, and does not require user interaction. Affected Android versions incl...

CVE-2020-0367

CVE-2020-0367 is documented as an out-of-bounds write due to a missing bounds check affecting Android components (notably Widevine) with Android ID A-162980455. Connected OSV records (ASB-A-162980455 and ASB-A-162980705) describe out-of-bounds write/read issues related to this same identifier. Pu...

CVE-2020-0391

CVE-2020-0391 is an Android elevation-of-privilege issue in PackageManagerService.applyPolicy that allows arbitrary command execution as System due to an unenforced protected-broadcast. It enables local privilege escalation with no user interaction on Android 9–11. The Android bulletin notes this...

CVE-2021-0398

CVE-2021-0398 describes a local EoP in Android 11 where ActiveServices.bindServiceLocked could allow a confused deputy to launch a foreground service, requiring no user interaction. The vulnerability is rooted in bindServiceLocked in ActiveServices.java, with the potential to elevate privileges w...

CVE-2021-0876

CVE-2021-0876 affects PVRSRVBridgePhysmemNewRamBackedLockedPMR in the PowerVR kernel driver on Android. The issue is a missing size check that enables an integer overflow, potentially allowing out-of-bounds heap access and local escalation of privilege with no extra privileges or user interaction...

CVE-2021-25356

CVE-2021-25356 pertains to Samsung’s Managed Provisioning. An improper caller check prior to SMR APR-2021 Release 1 allows an unprivileged application to install arbitrary applications, grant device admin permissions, and subsequently delete multiple installed apps. The issue’s root cause is an i...

CVE-2022-20191

CVE-2022-20191 is a Google Pixel modem vulnerability described as a Remote Code Execution issue in the Pixel modem, affecting Android kernel components. It is rated CRITICAL (CVSSv3.1: 9.8) with network exploitation and no required user interaction. The Pixel Update Bulletin assigns a fix via pat...

CVE-2022-20196

The CVE-2022-20196 issue affects Android 12L’s gallery3d and Photos. It describes a permission bypass due to a confused deputy, enabling local information disclosure without extra execution privileges. Exploitation is reported to require user interaction. The Pixel update bulletin lists CVE-2022-...

CVE-2022-20201

The CVE-2022-20201 issue affects Android's InstalldNativeService.cpp, specifically the getAppSize function, where a missing bounds check can cause an out-of-bounds read. This enables local escalation of privileges with System execution privileges implied, and exploitation does not require user in...

CVE-2022-20377

CVE-2022-20377 affects Android’s keymaster_ipc.cpp, enabling an attacker to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This configuration flaw can lead to local elevation of privilege with no additional execution privileges required and without user interaction. Public r...

CVE-2022-23429

CVE-2022-23429 describes an improper boundary check in the Android audio HAL service prior to SMR Feb-2022 Release 1, allowing local attackers to read invalid memory and cause an application crash. In the provided connected records, the vulnerability is documented across multiple sources (NVD, Re...

CVE-2022-47470

The CVE-2022-47470 issue concerns the ext4fsfilter driver and is caused by a missing bounds check that leads to an out-of-bounds read. The vulnerability allows local denial of service with SYSTEM privileges required, as described in multiple sources (e.g., Red Hat, NVD, CVE lists). Affected compo...

CVE-2022-47487

CVE-2022-47487 affects UNISOC chipsets (thermal service). Root cause: missing bounds check leading to an out-of-bounds write. Impact: local denial of service with no additional execution privileges. Exploitation status and patch details are not provided in the supplied documents. No explicit reme...

CVE-2022-48390

CVE-2022-48390 affects Unisoc Android telephony components and is caused by a missing permission check in the telephony service, enabling local escalation of privilege with no additional execution privileges. The issue is listed across multiple sources (NVD/Red Hat/Android bulletin), and Android ...

CVE-2022-48457

CVE-2022-48457 affects TeleService, where improper input validation can cause a local system crash, resulting in a denial of service with no additional privileges required. The available sources describe the vulnerability as a local DoS due to input validation issues, but do not specify affected ...

CVE-2023-20754

CVE-2023-20754 affects MediaTek keyinstall: an out-of-bounds write caused by an integer overflow in keyinstall could enable local privilege escalation with SYSTEM privileges and no user interaction. Multiple sources (including Red Hat and Android security bulletin mappings) corroborate the issue ...

CVE-2023-21217

CVE-2023-21217 is associated with Google Android, affecting the PowerVR-GPU driver. The vulnerability arises in the function PMRWritePMPageList() and is described as a possible out-of-bounds write caused by an integer overflow . The impact is a local escalation of privilege with no additional exe...

CVE-2024-27213

CVE-2024-27213 is a use after free vulnerability in the BroadcastSystemMessage function of servicemgr.cpp . This flaw could lead to Remote Code Execution (RCE) and local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The vulnerability affects ...

CVE-2024-31334

CVE-2024-31334 affects the DevmemIntFreeDefBackingPage function in the Android/Linux kernel code path devicemem_server.c. The described logic error could allow arbitrary code execution leading to local elevation of privilege without requiring user interaction. Exploitation is local (no remote vec...

CVE-2024-40657

CVE-2024-40657 affects the Android Framework, specifically the AccountTypePreferenceLoader.addPreferencesForType path. The issue can enable a confused deputy to disable apps for other users, causing local elevation of privilege with no extra execution privileges required and no user interaction n...

CVE-2024-43086

CVE-2024-43086 affects Android’s AccountManagerService.java, where an issue in validateAccountsInternal could permit leaking account credentials to a third‑party app via a confused deputy, causing local information disclosure with no extra privileges or user interaction required. Public sources (...

CVE-2024-43088

CVE-2024-43088 describes a local privilege escalation in Android involving multiple functions in AppInfoBase.java where a missing permission check allows manipulating another user’s app permission settings. Exploitation requires local access and does not need user interaction; no public exploit d...

CVE-2024-47017

CVE-2024-47017 affects the ufshc_scsi_cmd function in ufs.c, with a stack variable use-after-free leading to local escalation of privilege. The vulnerability description across Red Hat, NVD, CVE lists, and OSV entries consistently state that no further user interaction is required, and exploitati...

CVE-2024-47039

CVE-2024-47039 describes an out-of-bounds read in the BootControl.cpp isSlotMarkedSuccessful path of the android.hardware.boot.IBootControl default service. The underlying issue is a missing bounds check in BootControl.cpp, enabling local information disclosure without additional execution privil...

CVE-2026-28639

A logic error in the rw_mfc_handle_read_op function within rw_mfc.cc causes a possible out of bounds write in the Android System framework . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Exploitation details...

CVE-2015-5310

CVE-2015-5310 affects wpa_supplicant 2.x prior to 2.6. The WNM Sleep Mode code does not properly ignore key data in response frames when MFP was not negotiated, allowing remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service via a WNM Sleep Mode response....

CVE-2015-8955

CVE-2015-8955 affects the Linux kernel on arm64 (arch/arm64/kernel/perf_event.c) prior to 4.1. The issue arises from events across multiple HW PMUs being mishandled, allowing local users to gain privileges or trigger a denial of service via an invalid pointer dereference. Impact is limited to loc...

CVE-2020-0231

CVE-2020-0231 is a MediaTek External Memory Interface elevation-of-privilege vulnerability in Android. The issue is an out-of-bounds write caused by an incorrect bounds check; it is listed with high to critical impact (CVSS v3.1: 9.8) and affects Android devices with the MTK External Memory Inter...

CVE-2020-0254

CVE-2020-0254 is an information-disclosure vulnerability in Android’s MediaTek Multimedia Processing Driver. It stems from an incorrect bounds check, which could allow an out-of-bounds read. The issue is associated with the MediaTek component in Android and is documented in the Android 2020 secur...

CVE-2020-0339

CVE-2020-0339 is confirmed as an out-of-bounds read caused by a missing bounds check, associated with Android/SoC component A-162980705. OSV entries explicitly describe the issue as an out-of-bounds read (ASB-A-162980705) and (ASB-A-162980455). Exploitation status is not provided in the supplied ...

CVE-2021-39741

CVE-2021-39741 affects the Android Keymaster component on Android 12L, with an out-of-bounds write caused by a missing bounds check. This leads to local elevation of privilege with System execution privileges required; no user interaction is needed. The issue is listed in Android 12L security rel...

CVE-2021-39812

CVE-2021-39812 affects the Android kernel component where a use-after-free leads to an out-of-bounds read, enabling local escalation of privileges without user interaction. The issue is documented in Pixel Update Bulletin entries against the affected Pixel/Android kernel and is mitigated by apply...

CVE-2022-20152

CVE-2022-20152 affects the TitanM chip in Android kernel space, describing an out-of-bounds write caused by a missing bounds check that enables local escalation of privileges to System with no user interaction required. Public details on affected patch level or remediation are not provided in the...

CVE-2022-20171

CVE-2022-20171 is a Critical remote code execution vulnerability affecting Google Pixel modem components, disclosed in the Pixel Update Bulletin (June 2022). The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-based exploitation with no user interaction could co...

CVE-2022-20381

Summary (concrete details available): CVE-2022-20381 is mapped to the Android kernel in Google Pixel devices and is classified as an Elevation of Privilege (EoP) issue within the kernel component. The vulnerability is tracked in the NVD entry with a high-impact profile (CVSSv3.1: CVSS:3.1/AV:N/AC...

CVE-2022-20460

CVE-2022-20460 affects the Android kernel (mprot_unmap) where improper input validation could corrupt the memory mapping. The consequence is local escalation of privilege, requiring System execution privileges, with no user interaction needed. The description appears across multiple sources (e.g....

CVE-2022-20537

CVE-2022-20537 affects Android 13. In WifiScanModeActivity.java, the createDialog flow lacks a permission check, enabling a Guest user to enable location-sensitive settings and perform local privilege escalation without additional execution privileges or user interaction. Public exploitation deta...

CVE-2022-21754

CVE-2022-21754 affects MediaTek WLAN driver and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local escalation of privilege with System execution privileges required and no user interaction needed. The remediation referenced is Patch ID ALPS06535953 / I...

CVE-2022-23428

CVE-2022-23428 : An improper boundary check in the eden_runtime HAL service before SMR Feb-2022 Release 1 allows arbitrary memory write and code execution. The vulnerability is documented across multiple sources (NVD, CNVD, Red Hat, etc.) and is associated with Google Android. Affected component:...

CVE-2022-2984

CVE-2022-2984 affects the jpg driver in the Linux kernel. The root cause is a missing bounds check that can cause an out-of-bounds write, leading to local Denial of Service. The available connected documents consistently state a kernel-level impact but do not provide exploit details, affected ker...

CVE-2022-38670

The CVE-2022-38670 entry describes a vulnerability in the soundrecorder service caused by a missing permission check, potentially enabling local elevation of privilege in the contacts service without requiring additional execution privileges. Connected documents (RH/CVE, NVD, OSV entries) confirm...

CVE-2022-42527

CVE-2022-42527 involves a crash in the Android kernel due to a missing null check in the function cd_SsParseMsg of cd_SsCodec.c. The issue could allow remote denial of service without requiring privileges or user interaction. The available sources consistently describe the affected component as p...

CVE-2023-20621

CVE-2023-20621 affects tinysys and describes an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation with System privileges and no user interaction required. Public details indicate a patch ID ALPS07664755 (Issue ALPS07664755) exists, but the exact vulnerable ...

CVE-2023-20924

CVE-2023-20924 describes a biometric authentication bypass in the Android kernel that could enable local escalation of privilege with physical access and no user interaction. The Pixel bulletin ties this issue to the Pixel 6a fingerprint scanner and marks it as Elevation of Privilege (EoP) with H...