CVE-2016-2429

CVE-2016-2429 affects libFLAC/stream_decoder.c in mediaserver on Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01. Root cause: free operations on uninitialized memory in mediaserver’s decoder path. Impact: remote code execution or denial of service via a...

CVE-2017-0737

The CVE-2017-0737 entry describes an elevation of privilege in Android's media framework (libstagefright) affecting Android versions 4.4.4 through 7.1.2. The vulnerability lies in the media framework and could allow a local attacker to execute code with elevated privileges in a privileged process...

CVE-2020-0045

CVE-2020-0045 affects Android 10 framework components. The vulnerability is in StatsService::command where a race condition can cause memory corruption, enabling local escalation of privilege with System execution privileges required. Exploitation is described as local (AV:L, UI:N) with no user i...

CVE-2020-0455

CVE-2020-0455 is an out-of-bounds write caused by a missing bounds check in the MediaTek vcu component (MediaTek MTK ALPS05324771) within Android. The issue is listed under Android’s 2020-12 security bulletin with patches recommended for patch levels 2020-12-01 or later; exact affected device mod...

CVE-2021-39741

CVE-2021-39741 affects the Android Keymaster component on Android 12L, with an out-of-bounds write caused by a missing bounds check. This leads to local elevation of privilege with System execution privileges required; no user interaction is needed. The issue is listed in Android 12L security rel...

CVE-2022-20032

The CVE-2022-20032 entry concerns the vow driver, where a race condition may trigger memory corruption that could disclose local information and potentially grant SYSTEM-level execution privileges. Exploitation reportedly requires no user interaction. A patch/mitigation is listed as ALPS05852822 ...

CVE-2022-20045

CVE-2022-20045 describes a vulnerability in Bluetooth where a use-after-free can cause a service crash, enabling local escalation of privilege with no extra execution privileges required and no user interaction. The issue is evidenced across multiple sources (NVD, Red Hat, CVE List). The underlyi...

CVE-2022-20050

The CVE-2022-20050 entry refers to a vulnerability in connsyslogger where improper link resolution enables symbolic link following, leading to local escalation of privilege with System execution privileges required. Exploitation is described as local with no user interaction needed. Affected comp...

CVE-2022-20156

CVE-2022-20156 is an elevation-of-privilege vulnerability in Android’s graphics path: specifically, an issue in the unflatten path of GraphicBuffer.cpp that allows arbitrary code execution via improper input validation. Exploitation is local and does not require user interaction. The impact is st...

CVE-2022-20525

CVE-2022-20525 affects Android 13 and points to a permissions bypass in enforceVisualVoicemailPackage inside PhoneInterfaceManager.java, causing a leak of the visual voicemail package name. The impact is local elevation of privilege with no extra execution privileges and no user interaction requi...

CVE-2022-20562

The CVE-2022-20562 entry concerns a logic error in ap_input_processor.c within the Android kernel’s audio processing path that could allow recording audio during a phone call, leading to local information disclosure. The vulnerability is classified as Information Disclosure with a Local attack ve...

CVE-2022-20603

CVE-2022-20603 affects the Android kernel: a possible out-of-bounds write in SetDecompContextDb (RohcDeCompContextOfRbId.cpp) due to a missing bounds check. This could enable remote code execution with System privileges, with no user interaction required. Connected sources (NVD, Red Hat, PRION, O...

CVE-2022-42517

CVE-2022-42517 affects the Android kernel, specifically the MiscService::DoOemSetTcsFci function in miscservice.cpp. The issue is an out-of-bounds read caused by a missing bounds check, leading to local information disclosure with System privileges required for exploitation and no user interactio...

CVE-2022-47337

CVE-2022-47337 affects the media service and is caused by a missing permission check, enabling local denial of service. The description consistently states a local DoS risk but does not provide exploit details, affected versions, or a verified patch within the supplied documents. Red Hat, NVD, an...

CVE-2022-48438

CVE-2022-48438 concerns the cp_dump driver, with a root cause described as a missing bounds check that enables a possible out-of-bounds write. The affected impact is a local denial of service with SYSTEM privileges required. Multiple connected sources (RH, NVD, PRION, Vulnrichment, CVE list, CNNV...

CVE-2023-32812

CVE-2023-32812 affects the gnss service in MediaTek contexts, with an out-of-bounds write caused by improper input validation. The resulting impact is local privilege escalation with SYSTEM privileges needed, and exploitation requires no user interaction. A patch is noted (ALPS08017365 / ALPS0801...

CVE-2023-32872

The CVE-2023-32872 issue is in MediaTek’s keyInstall module. It describes an out-of-bounds write caused by a missing bounds check, potentially enabling local privilege escalation to SYSTEM with no user interaction required. Public references in the connected documents consistently state this as a...

CVE-2023-48405

CVE-2023-48405 describes a logic error that allows the secure world to write to NS memory, enabling local elevation of privilege (System-level) without user interaction. The vulnerability is listed in Google Pixel security bulletin as CVE-2023-48405 with EoP impact (High) in the LDFW component. A...

CVE-2015-3108

CVE-2015-3108 describes a memory disclosure vulnerability in Adobe Flash Player and related AIR components that bypasses ASLR by not properly restricting discovery of memory addresses. Affected products include Flash Player on Windows, macOS, and Linux (versions listed in the entry), and Adobe AI...

CVE-2015-6783

CVE-2015-6783 affects Google Chrome components on Android 5.x–6.x that use Crazy Linker. The vulnerability is in crazy_linker_zip.cpp FindStartOffsetOfFileInZipFile, where EOCD record search is faulty, allowing signature-validation bypass via a crafted ZIP archive. Public docs confirm this CVE wa...

CVE-2019-1988

CVE-2019-1988 affects Android Framework related to a vulnerability in PNG handling. In SkSwizzler.cpp, a possible out-of-bounds write due to improper input validation could lead to remote code execution in the system_server, requiring user interaction to exploit. Affected Android versions include...

CVE-2020-0278

CVE-2020-0278 describes a possible out-of-bounds write due to an incorrect bounds check in Android components (notably ATF) as referenced in the 2020-09 Android bulletin. The NVD entry assigns a high/critical impact with remote network exploitation, no user interaction required. Connected records...

CVE-2020-0454

Summary: CVE-2020-0454 affects Android 9 (Android-9) via the ConnectivityService.java callCallbackForRequest, enabling a local attacker with LOW privileges to bypass a permission check and disclose the current SSID without user interaction. Exploitation is localized to the device; no remote acces...

CVE-2021-0527

CVE-2021-0527 concerns a memory management driver issue where a use-after-free can cause memory corruption, enabling local privilege escalation without additional privileges. The vulnerability is described across multiple sources as affecting Android devices with MediaTek memory management driver...

CVE-2021-25356

CVE-2021-25356 pertains to Samsung’s Managed Provisioning. An improper caller check prior to SMR APR-2021 Release 1 allows an unprivileged application to install arbitrary applications, grant device admin permissions, and subsequently delete multiple installed apps. The issue’s root cause is an i...

CVE-2022-20035

CVE-2022-20035 involves the vcu driver and an information-disclosure use-after-free vulnerability that could allow local escalation to System privileges. The issue does not require user interaction. Affected component: vcu driver. Root cause: use-after-free leading to partial confidentiality impa...

CVE-2022-20099

CVE-2022-20099: In the aee daemon, there is an out-of-bounds write caused by improper input validation, enabling local escalation of privilege to SYSTEM with no user interaction required. Patch ALPS06296442 issued. Connected references corroborate the issue; exploitation details are not provided ...

CVE-2022-20146

CVE-2022-20146 affects Android via the information disclosure in the uploadFile function of FileUploadServiceImpl.java, caused by a confused deputy that can expose private files locally without extra privileges. Exploitation is local and does not require user interaction. Public details in the co...

CVE-2022-20175

CVE-2022-20175 is documented in the Pixel security bulletin under the Modem component, with Android bug ID A-209252491. It is classified as Information Disclosure (Type: ID) and rated Moderate; no exploit details are provided in the connected documents. The Pixel bulletin notes the patch level 20...

CVE-2022-20180

CVE-2022-20180 describes an elevation of privilege in Android kernel code, arising from a missing bounds check in mali_gralloc_reference.cpp that can allow arbitrary code execution on a local basis. The impact is local privilege escalation with high confidentiality/integrity/availability implicat...

CVE-2022-20371

Summary: CVE-2022-20371 affects the Android kernel, specifically the dm_bow_dtr path in dm-bow.c, due to a race-condition use-after-free. The vulnerability enables local escalation of privilege to System by exploiting a race condition, with no user interaction required. Documents consistently des...

CVE-2022-20530

CVE-2022-20530 affects Android 13, where a vulnerability in the strings.xml resource can bypass a permission and potentially disclose call logs remotely without extra execution privileges. The issue is described as a permission bypass with remote information disclosure and no user interaction req...

CVE-2022-20538

Summary: CVE-2022-20538 affects Android 13 in the getSmsRoleHolder path of RoleService.java. A side-channel information disclosure can let an attacker determine if an app is installed without query permissions, enabling local information disclosure with no extra execution privileges and no user i...

CVE-2022-20569

CVE-2022-20569 affects the Android kernel, specifically the thermal cooling device stats update path in the thermal_sysfs.c driver. The issue is described as an out-of-bounds write caused by improper input validation in the function thermal_cooling_device_stats_update, which could lead to local e...

CVE-2022-20581

CVE-2022-20581 affects the Pixel camera driver in the Android kernel. The issue is a use-after-free caused by a logic error, enabling local escalation of privilege with System-level execution privileges required. No user interaction is needed for exploitation. Documented exposure is limited to th...

CVE-2022-20583

CVE-2022-20583 affects the Android kernel DRM firmware path: in function ppmp_unprotect_mfcfw_buf there is an out-of-bounds write due to improper input validation. This could enable local escalation of privilege in S-EL1 with System privileges granted, and exploitation is described as not requiri...

CVE-2022-33723

CVE-2022-33723 concerns a vulnerable code path in the BluetoothScanDialog component on Android/Samsung devices. The issue is located in the onCreate method of BluetoothScanDialog, where an attacker could trick a user into selecting an unwanted Bluetooth device via a tapjacking/overlay attack. Aff...

CVE-2022-48461

CVE-2022-48461 concerns a vulnerability in the sensor driver where a missing bounds check can cause an out-of-bounds write, leading to local denial of service with System execution privileges. Public sources repeatedly describe the issue as a sensor-driver boundary-check defect in Unisoc/UNISOC-r...

CVE-2023-20725

CVE-2023-20725 affects MediaTek chip preloader: an out-of-bounds write caused by a missing bounds check can lead to local escalation of privilege with System execution privileges required. Exploitation requires no user interaction. Affected devices/versions include MT6880, MT6890, MT6980, and MT6...

CVE-2023-20747

The CVE-2023-20747 issue affects the vcu module in MediaTek chips. Root cause is memory corruption due to type confusion, leading to local denial of service with system execution privileges. Exploitation details are not provided; user interaction is not required. A patch identified as ALPS0751910...

CVE-2023-20924

CVE-2023-20924 describes a biometric authentication bypass in the Android kernel that could enable local escalation of privilege with physical access and no user interaction. The Pixel bulletin ties this issue to the Pixel 6a fingerprint scanner and marks it as Elevation of Privilege (EoP) with H...

CVE-2023-21062

CVE-2023-21062 describes an out-of-bounds read in the Android kernel, triggered by an incorrect bounds check in the DoSetTempEcc function of imsservice.cpp. The vulnerability can enable local escalation of privilege with System execution privileges required, and exploitation does not require user...

CVE-2023-21154

CVE-2023-21154 : Affects the Android kernel, specifically the StoreAdbSerialNumber path in protocolmiscbuilder.cpp, where a missing bounds check can cause an out-of-bounds read. This is described as enabling local information disclosure with System-level privileges needed; exploitation reportedly...

CVE-2023-21155

The CVE-2023-21155 issue concerns the Android kernel component BuildSetRadioNode in protocolmiscbuilder.cpp, where a missing null check enables an out-of-bounds read that could cause local information disclosure with no extra privileges or user interaction. Several connected sources confirm the r...

CVE-2023-21178

CVE-2023-21178 concerns Android 13 where the issue arises in the installKey function of KeyUtil.cpp. A race condition could cause a possible failure of file encryption, leading to local information disclosure with System privileges required. Exploitation reportedly does not require user interacti...

CVE-2023-21236

CVE-2023-21236 affects the Android kernel in the aoc_service_set_read_blocked function of aoc.c, where a missing bounds check enables an out-of-bounds write. This can lead to local elevation of privileges requiring System level execution. The vulnerability is associated with Android kernel compon...

CVE-2023-32851

CVE-2023-32851 involves a MediaTek MediaTek decoder vulnerability: an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with user interaction required. The issue is tracked with patch ID ALPS08016652 (and Issue ID ALPS08016652); no exploitation details o...

CVE-2023-35663

CVE-2023-35663 describes a vulnerability in Init of protocolnetadapter.cpp where a missing bounds check may cause an out-of-bounds read. This can lead to remote information disclosure without requiring user interaction, per the provided description. The affected software/component is tied to Andr...

CVE-2023-48349

CVE-2023-48349 affects a video decoder in Android components (Unisoc subcomponent) with a root cause of a missing bounds check that allows an out-of-bounds write. This could lead to local denial of service without extra privileges. Public details in connected docs are limited to the generic descr...

CVE-2023-48403

Summary: CVE-2023-48403 describes a possible out-of-bounds read due to a heap buffer overflow in the function sms_DecodeCodedTpMsg of sms_PduCodec.c. This could enable remote information disclosure without user interaction, as exploitation does not require additional privileges. The vulnerability...