CVE-2023-21154

CVE-2023-21154 : Affects the Android kernel, specifically the StoreAdbSerialNumber path in protocolmiscbuilder.cpp, where a missing bounds check can cause an out-of-bounds read. This is described as enabling local information disclosure with System-level privileges needed; exploitation reportedly...

CVE-2023-21164

CVE-2023-21164 affects the DevmemIntMapPMR code path in devicemem_server.c within the PowerVR GPU driver stack on Android/ChromeOS. The issue is a use-after-free that can lead to arbitrary code execution and local escalation of privileges in the kernel, with no additional execution privileges or ...

CVE-2023-40108

The Android Framework is affected by a High severity Information Disclosure vulnerability (CVE-2023-40108 ) caused by a missing permission check. This flaw allows an attacker to access media content belonging to another user, potentially leading to the exposure of sensitive information. Exploitat...

CVE-2024-20092

The vdec component is vulnerable to an out-of-bounds write caused by a missing bounds check. This flaw could allow for local escalation of privilege , requiring System execution privileges to exploit. No user interaction is required for exploitation. Remediation is available via Patch ID: ALPS090...

CVE-2024-22011

CVE-2024-22011 affects the Android/Pixel surface via the ss_ProcessRejectComponent function in ss_MmConManagement.c, where a missing bounds check enables an out-of-bounds read. This can lead to remote information disclosure without user interaction and without additional execution privileges. The...

CVE-2024-27207

The Android kernel (and specifically the Telephony subcomponent on Google Pixel devices) is vulnerable to an Elevation of Privilege (EoP) flaw. The root cause involves exported broadcast receivers that allow malicious applications to bypass existing broadcast protections. For Google Pixel devices...

CVE-2024-29743

A missing bounds check in the tmu_set_temp_lut function of tmu.c leads to a possible out-of-bounds write on Google Pixel devices. This vulnerability impacts the ACPM subcomponent and could result in a local escalation of privilege (EoP) without requiring additional execution privileges or user in...

CVE-2024-32897

CVE-2024-32897 involves an out-of-bounds read in ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() within protocolsmsadapter.cpp. The issue arises from a missing bounds check, enabling a possible information disclosure; exploitability is network-based with no user interaction and could lead to baseb...

CVE-2024-32915

A security vulnerability exists in the Exynos RIL subcomponent affecting Google Pixel devices. The issue is caused by a missing bounds check in the CellInfoListParserV2::FillCellInfo() function within protocolnetadapter.cpp, leading to a possible out-of-bounds read . This vulnerability could resu...

CVE-2024-34748

The Linux Kernel is affected by a use-after-free vulnerability in the _DevmemXReservationPageAddress function of devicemem_server.c, caused by improper casting . This flaw allows for a local escalation of privilege in the kernel without requiring additional execution privileges or user interactio...

CVE-2014-9870

The CVE-2014-9870 entry concerns the Linux kernel prior to 3.11 on ARM, including Android devices (Nexus 5/7) before 2016-08-05. It exposes a privilege-escalation path via improper handling of user-space access to the TPIDRURW register, enabling local attackers to gain privileges with a crafted a...

CVE-2015-3098

Adobe Flash Player and related AIR components are affected by a vulnerability (CVE-2015-3098) that could bypass the Same Origin Policy via unspecified vectors. Mageia MGASA-2015-0248 notes a fix in Flash Player 11.2.202.468 and links CVE-2015-3098 to this update. Affected versions include Windows...

CVE-2015-6783

CVE-2015-6783 affects Google Chrome components on Android 5.x–6.x that use Crazy Linker. The vulnerability is in crazy_linker_zip.cpp FindStartOffsetOfFileInZipFile, where EOCD record search is faulty, allowing signature-validation bypass via a crafted ZIP archive. Public docs confirm this CVE wa...

CVE-2015-8955

CVE-2015-8955 affects the Linux kernel on arm64 (arch/arm64/kernel/perf_event.c) prior to 4.1. The issue arises from events across multiple HW PMUs being mishandled, allowing local users to gain privileges or trigger a denial of service via an invalid pointer dereference. Impact is limited to loc...

CVE-2017-0557

CVE-2017-0557 is an information-disclosure vulnerability in libmpeg2 within Android’s Mediaserver. A local attacker could access data outside of the app’s permission level due to a flaw in Mediaserver’s handling of media processing. Affected Android versions include 6.0, 6.0.1, 7.0, and 7.1.1. Th...

CVE-2017-0786

CVE-2017-0786 is an elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver affecting the Android kernel. Public records in the initial description identify the affected component as the Broadcom Wi‑Fi driver within the Android kernel and describe the issue as an elevation of privilege;...

CVE-2020-0342

CVE-2020-0342 is an Android vulnerability described as an out-of-bounds write caused by an incorrect bounds check. Connected sources show this entry associated with Android components including MediaTek ATF and Qualcomm closed-source components, with patches issued in the Android September 2020 s...

CVE-2021-0885

CVE-2021-0885 affects the PowerVR kernel driver (PVRSRVBridgeSyncPrimOpTake). The issue is a missing size check that enables an integer overflow, causing out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed, and exploitation is...

CVE-2021-25356

CVE-2021-25356 pertains to Samsung’s Managed Provisioning. An improper caller check prior to SMR APR-2021 Release 1 allows an unprivileged application to install arbitrary applications, grant device admin permissions, and subsequently delete multiple installed apps. The issue’s root cause is an i...

CVE-2022-20073

CVE-2022-20073 affects the preloader (usb) on MediaTek devices, where an integer underflow can trigger an out-of-bounds write. This can enable local escalation of privilege for an attacker with physical device access, with user interaction required for exploitation. The issue is documented with P...

CVE-2022-20365

CVE-2022-20365 affects the Android kernel (Pixel device context) and is labeled Elevation of Privilege (EoP) in userland. The CVE entry is listed under Pixel Update Bulletin security patches, with the issue categorized as Moderate severity for the affected kernel component, and a patch level of 2...

CVE-2022-20400

CVE-2022-20400 affects Android kernel code, specifically the cd_CodeMsg path in cd_codec.c, where a missing bounds check can cause an out-of-bounds write. This leads to remote code execution with no privileges required and no user interaction, as indicated by the description and NVD metrics (CVSS...

CVE-2022-20405

CVE-2022-20405 affects the Android kernel/modem stack used by Google Pixel devices, described as a Modem Elevation of Privilege vulnerability. Public details indicate a zero-click style chain that could downgrade the device’s cellular modem to 2G and potentially allow takeover of the handset via ...

CVE-2022-20603

CVE-2022-20603 affects the Android kernel: a possible out-of-bounds write in SetDecompContextDb (RohcDeCompContextOfRbId.cpp) due to a missing bounds check. This could enable remote code execution with System privileges, with no user interaction required. Connected sources (NVD, Red Hat, PRION, O...

CVE-2022-25821

CVE-2022-25821 affects Samsung’s Shannon baseband (SMS handling). The vulnerability arises from improper use of the SMS buffer pointer, enabling an out-of-bounds read. Public sources describe impact as read access to memory due to buffer mismanagement in Shannon baseband prior to SMR Mar-2022 Rel...

CVE-2022-47486

CVE-2022-47486 affects the ext4fsfilter driver and is caused by a missing bounds check that enables an out‑of‑bounds read. The consequence is a possible local denial of service with System privileges required. Public details in the provided documents consistently describe the issue as a local DoS...

CVE-2022-48454

CVE-2022-48454 concerns the wifi service, where a missing bounds check can cause an out-of-bounds write leading to local denial of service without extra privileges. The issue is supported by multiple sources in the provided set (NVD entry reproduces the description and CVSS metrics; Red Hat advis...

CVE-2023-21052

CVE-2023-21052 affects the Android kernel component ril_external_client.cpp (setToExternal). The issue is an out-of-bounds write caused by a missing bounds check in that function, enabling local privilege escalation with system-level execution privileges and no user interaction required. Exploita...

CVE-2023-40141

The CVE-2023-40141 issue affects the temp_residency_name_store function in thermal_metrics.c, where a missing bounds check enables an out-of-bounds write. This is described as a potential local privilege escalation with no additional execution privileges required and no user interaction needed. C...

CVE-2024-20081

A vulnerability exists in the gnss service due to an out-of-bounds write caused by improper input validation. This flaw allows for a local escalation of privilege to System execution privileges. Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS08719602 (I...

CVE-2024-27208

Google Pixel devices are affected by CVE-2024-27208 , a vulnerability within the ACPM subcomponent. The issue stems from a missing bounds check , which can lead to an out-of-bounds write . This flaw allows for local escalation of privilege (EoP) without requiring additional execution privileges o...

CVE-2024-27209

A heap buffer overflow in a TBD module on Google Pixel devices can lead to an out-of-bounds write . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. While the specific component or version is not fully detailed...

CVE-2024-47040

CVE-2024-47040 is a Use-After-Free in the Android Android Pixel stack involving the android.hardware.radio.sap.ISap/slot2 service. Root cause: a logic error leads to UAF, enabling local Elevation of Privilege with no user interaction. Documents provide no exploitation details or specific patch/ve...

CVE-2025-48552

A logic error in the saveGlobalProxyLocked function of the DevicePolicyManagerService.java module in the Android framework allows for a local elevation of privilege . An attacker can exploit this vulnerability to gain additional privileges and execute arbitrary code without requiring additional e...

CVE-2015-3101

CVE-2015-3101 describes a privilege-escalation path in the Flash broker when using Internet Explorer, affecting the Flash Player and related AIR components. The vulnerability is tied to a transition from Low Integrity to Medium Integrity via IE, with the impact (per the sources) being privilege e...

CVE-2018-15835

CVE-2018-15835 concerns Android OS battery information broadcasts. The connected materials indicate the issue arises from insecure permissions around system broadcast data, allowing apps to access high‑precision battery information without special permissions. Android versions 1.0 through 9.0 are...

CVE-2018-9390

CVE-2018-9390 involves an out-of-bounds read in procfile_write within gl_proc.c caused by an incorrect bounds check, enabling local privilege escalation with SYSTEM rights. Exploitation is not user-initiated. Reports from NVD/Red Hat/CNNVD mirror a consistent description across Android Pixel devi...

CVE-2020-0456

CVE-2020-0456 is an out-of-bounds write due to a missing bounds check affecting Android with Android SoC A-170378843 (MediaTek vcu). CVSS v3.1 shows 9.8 (CRITICAL); CVSS v2 shows 7.5 (HIGH). Exploitation remotely over network without user interaction; impact on confidentiality, integrity, and ava...

CVE-2021-0878

The CVE-2021-0878 issue affects the PowerVR PVRSRVBridgeServerSyncGetStatus path in the PVRSRV kernel driver. The root cause is a missing size check that can trigger an integer overflow, enabling out-of-bounds heap access. This could enable local escalation of privilege without additional executi...

CVE-2021-0882

The CVE-2021-0882 issue affects Android devices using the Imagination Technologies PowerVR PowerVR kernel driver (PVRSRVBridgeRGXKickSync). The root cause is a missing size check that enables an integer overflow, leading to out-of-bounds heap access. This can allow local escalation of privilege w...

CVE-2021-25346

CVE-2021-25346 affects Samsung quram library, with vulnerable versions prior to SMR Jan-2021 Release 1. The root cause is an arbitrary memory overwrite that can lead to arbitrary code execution. Publicly documented impact aligns with memory corruption in quram components; Samsung has released sec...

CVE-2021-25477

CVE-2021-25477 affects Mediatek RRC Protocol stack; improper error handling could cause a modem crash and remote DoS. Root cause described as error handling weakness in the Mediatek RRC stack prior to SMR Oct-2021 Release 1. Documented impact is network-exposed denial of service with potential av...

CVE-2022-20148

Technical details are not publicly available in the provided connected documents for CVE-2022-20148. Monitor for updates from upstream/kernel advisories; no specifics on affected products, versions, or remediation are included.

CVE-2022-20162

CVE-2022-20162 is an information-disclosure flaw in the Android kernel’s crypto/asn1.c, specifically in the function asn1_p256_int, where an incorrect bounds check allows an out-of-bounds read. The impact is local information disclosure with system privileges required; exploitation requires no us...

CVE-2022-20167

CVE-2022-20167 is listed in the Google Pixel security bulletin as a modem component Elevation of Privilege vulnerability (High) affecting Pixel devices. The connected Pixel bulletin entry confirms the issue type and severity but does not provide explicit exploit details in the available documents...

CVE-2022-20190

Technical details for CVE-2022-20190 are not publicly available in the provided documents. No concrete information on affected components, root cause, impact, or fixes is present. Monitor for updates.

CVE-2022-20366

CVE-2022-20366 affects the Android kernel component lwis_ioctl.c, in ioctl_dpm_clk_update, where an integer overflow can cause an out-of-bounds write. This is described as enabling local privilege escalation to SYSTEM level with no user interaction required. The vulnerability is documented across...

CVE-2022-20528

Summary: CVE-2022-20528 affects Android-13 via a flaw in the FindParam path of HevcUtils.cpp causing an out-of-bounds read due to a missing bounds check. This can enable local privilege escalation with no additional execution privileges and no user interaction is required. The vulnerability is do...

CVE-2022-2985

CVE-2022-2985 : In the Android music service, a missing permission check could allow a local attacker to elevate privileges in the contacts service without any additional execution privileges. The vulnerability is described consistently across sources (NVD/CVE entry, CNVD, CNSC/NCSC advisories, O...

CVE-2022-42522

CVE-2022-42522 concerns the Android kernel, specifically a bound-check issue in DoSetCarrierConfig() inside miscservice.cpp. The flaw allows an out-of-bounds read, which could cause local information disclosure with system-level privileges required for exploitation; no user interaction is needed....