CVE-2019-1988

CVE-2019-1988 affects Android Framework related to a vulnerability in PNG handling. In SkSwizzler.cpp, a possible out-of-bounds write due to improper input validation could lead to remote code execution in the system_server, requiring user interaction to exploit. Affected Android versions include...

CVE-2020-0123

CVE-2020-0123 describes a possible out-of-bounds write caused by an incorrect bounds check in the Android TV sound driver. The vulnerability affects Android TV components, with the root cause identified as a bounds-check fault in the sound subsystem, potentially enabling out-of-bounds writes. The...

CVE-2020-0278

CVE-2020-0278 describes a possible out-of-bounds write due to an incorrect bounds check in Android components (notably ATF) as referenced in the 2020-09 Android bulletin. The NVD entry assigns a high/critical impact with remote network exploitation, no user interaction required. Connected records...

CVE-2020-0455

CVE-2020-0455 is an out-of-bounds write caused by a missing bounds check in the MediaTek vcu component (MediaTek MTK ALPS05324771) within Android. The issue is listed under Android’s 2020-12 security bulletin with patches recommended for patch levels 2020-12-01 or later; exact affected device mod...

CVE-2021-0884

CVE-2021-0884 concerns the PowerVR kernel driver’s PVRSRVBridgePhysmemImportSparseDmaBuf function. A missing size check enables an integer overflow, which could permit out-of-bounds heap access and local escalation of privilege without additional execution privileges. Exploitation details (vector...

CVE-2021-0948

CVE-2021-0948 affects the PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver. The issue allows returning uninitialized kernel memory to user space, meaning the contents of that memory could disclose sensitive information. Supported by multiple connected sources (NVD/Red Hat/CVE ecosy...

CVE-2022-20042

CVE-2022-20042 affects Bluetooth with incorrect error handling that may cause local information disclosure. Exploitation requires local access; no user interaction is needed. Documents consistently cite a patch/issue identifier ALPS06108487. No additional exploit details or affected product/versi...

CVE-2022-20057

CVE-2022-20057 affects the btif component in MediaTek-based devices, where a memory corruption due to incorrect error handling could enable local privilege escalation with system execution privileges. Exploitation requires user interaction. The issue is associated with patch ALPS06271186 (ALPS062...

CVE-2022-20107

CVE-2022-20107 affects the subtitle service and is caused by an integer overflow that can crash the application, enabling local denial of service with SYSTEM privileges. The vulnerability is exploitable locally (attack vector: LOCAL, attack complexity: LOW) and does not require user interaction. ...

CVE-2022-20148

Technical details are not publicly available in the provided connected documents for CVE-2022-20148. Monitor for updates from upstream/kernel advisories; no specifics on affected products, versions, or remediation are included.

CVE-2022-20403

CVE-2022-20403 targets Google Pixel devices via the Android modem component. The Pixel security bulletin classifies it as RCE (critical) in the Modem with a high impact; the NVD entry records a CVSSv3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The initial records list Product: And...

CVE-2022-20443

CVE-2022-20443 concerns Android 13 where the hasInputInfo function in Layer.cpp may bypass user interaction via a tapjacking/overlay attack, enabling local escalation of privilege with no extra execution privileges and no user interaction required for exploitation. Affected product: Android 13 (A...

CVE-2022-20528

Summary: CVE-2022-20528 affects Android-13 via a flaw in the FindParam path of HevcUtils.cpp causing an out-of-bounds read due to a missing bounds check. This can enable local privilege escalation with no additional execution privileges and no user interaction is required. The vulnerability is do...

CVE-2022-20569

CVE-2022-20569 affects the Android kernel, specifically the thermal cooling device stats update path in the thermal_sysfs.c driver. The issue is described as an out-of-bounds write caused by improper input validation in the function thermal_cooling_device_stats_update, which could lead to local e...

CVE-2022-20583

CVE-2022-20583 affects the Android kernel DRM firmware path: in function ppmp_unprotect_mfcfw_buf there is an out-of-bounds write due to improper input validation. This could enable local escalation of privilege in S-EL1 with System privileges granted, and exploitation is described as not requiri...

CVE-2022-42522

CVE-2022-42522 concerns the Android kernel, specifically a bound-check issue in DoSetCarrierConfig() inside miscservice.cpp. The flaw allows an out-of-bounds read, which could cause local information disclosure with system-level privileges required for exploitation; no user interaction is needed....

CVE-2022-42531

CVE-2022-42531 affects the Android kernel component gs_ldfw_load.c, specifically the mmu_map_for_fw path. The issue is described as a mitigation bypass due to Permissive Memory Allocation, enabling local elevation of privilege without additional execution privileges or user interaction. The vulne...

CVE-2022-42542

CVE-2022-42542 affects Android 13 via the phNxpNciHal_core_initialized function in phNxpNciHal.cc, where a missing bounds check allows an out-of-bounds write that could enable local escalation of privilege with System execution privileges. Exploitation status is not detailed in the provided docum...

CVE-2022-48438

CVE-2022-48438 concerns the cp_dump driver, with a root cause described as a missing bounds check that enables a possible out-of-bounds write. The affected impact is a local denial of service with SYSTEM privileges required. Multiple connected sources (RH, NVD, PRION, Vulnrichment, CVE list, CNNV...

CVE-2022-48461

CVE-2022-48461 concerns a vulnerability in the sensor driver where a missing bounds check can cause an out-of-bounds write, leading to local denial of service with System execution privileges. Public sources repeatedly describe the issue as a sensor-driver boundary-check defect in Unisoc/UNISOC-r...

CVE-2023-21065

The CVE-2023-21065 issue affects the Android kernel’s fdt_next_tag function in fdt.c, causing a possible out-of-bounds write driven by an integer overflow. This could enable local elevation of privilege with system execution privileges required, and no user interaction is needed. No concrete reme...

CVE-2023-21178

CVE-2023-21178 concerns Android 13 where the issue arises in the installKey function of KeyUtil.cpp. A race condition could cause a possible failure of file encryption, leading to local information disclosure with System privileges required. Exploitation reportedly does not require user interacti...

CVE-2023-32851

CVE-2023-32851 involves a MediaTek MediaTek decoder vulnerability: an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with user interaction required. The issue is tracked with patch ID ALPS08016652 (and Issue ID ALPS08016652); no exploitation details o...

CVE-2023-40108

CVE-2023-40108 describes an information-disclosure vulnerability in Google Android where a lack of permission checking can allow access to media content belonging to other users without executing code or requiring user interaction. The CVE notes a local access vector with medium base score (5.5) ...

CVE-2023-48402

CVE-2023-48402 refers to a local elevation-of-privilege in the ppcfw_enable function of ppcfw.c due to a missing permission check. Exploitation requires no user interaction and could grant higher privileges on the device. Multiple sources (including Red Hat and NVD entries) corroborate the same d...

CVE-2023-48403

Summary: CVE-2023-48403 describes a possible out-of-bounds read due to a heap buffer overflow in the function sms_DecodeCodedTpMsg of sms_PduCodec.c. This could enable remote information disclosure without user interaction, as exploitation does not require additional privileges. The vulnerability...

CVE-2024-29743

CVE-2024-29743 describes a potential out-of-bounds write in the function tmu_set_temp_lut of tmu.c, requiring local access with no user interaction. The vulnerability could enable a local elevation of privilege, as the write occurs due to a missing bounds check. Across multiple sources (NVD, Red ...

CVE-2024-32903

CVE-2024-32903 affects the lwis transaction component, specifically the function prepare_response_locked. The provided documents indicate a possible out-of-bounds write caused by improper input validation, which could lead to local privilege escalation without requiring additional privileges or u...

CVE-2025-20661

CVE-2025-20661 affects PlayReady TA. Root cause: missing bounds check enabling an out-of-bounds read that can yield local escalation of privilege when the attacker already has System privileges; exploitation requires no user interaction. A patch is referenced (Patch ID: DTV04436357; MSV-3185). No...

CVE-2017-0557

CVE-2017-0557 is an information-disclosure vulnerability in libmpeg2 within Android’s Mediaserver. A local attacker could access data outside of the app’s permission level due to a flaw in Mediaserver’s handling of media processing. Affected Android versions include 6.0, 6.0.1, 7.0, and 7.1.1. Th...

CVE-2019-2016

CVE-2019-2016 affects Android: the issue is in NFA_SendRawFrame within nfa_dm_api.cc, where improper input validation can cause an out-of-bounds write. This can lead to local privilege escalation with no additional privileges required, and exploitation requires user interaction. Affected Android ...

CVE-2020-0260

CVE-2020-0260 affects Android devices via the MediaTek Multimedia Processing Driver. The issue is an out-of-bounds read caused by an incorrect bounds check, enabling a potential memory access violation. The CVE is listed with high/severe impact (NVD: CVSSv3.1 base score 9.1, Critical) and Low/Net...

CVE-2020-0446

CVE-2020-0446 refers to an Android vulnerability in the video decoder where a missing bounds check enables an out-of-bounds write. Affected component/area: MediaTek video decoder (Android SoC). Root cause: insufficient bounds checking in decoding paths leading to memory/write outside bounds. Impa...

CVE-2020-11836

Technical details about CVE-2020-11836 are not provided in the supplied documents; no specifics on affected components, root cause, or fixes are publicly available. Monitor for updates.

CVE-2021-0873

CVE-2021-0873 : A missing size check in PVRSRVBridgeRGXKickRS within the PowerVR kernel driver can cause an integer overflow, enabling out-of-bounds heap access. This may permit local escalation of privilege with no additional execution privileges required and without user interaction. The issue ...

CVE-2021-0880

CVE-2021-0880 involves the PowerVR kernel driver’s PVRSRVBridgeRGXKickTA3D, where a missing size check can trigger an integer overflow and out-of-bounds heap access. This enables local escalation of privilege with no additional execution privileges required and without user interaction. Connected...

CVE-2022-20045

CVE-2022-20045 describes a vulnerability in Bluetooth where a use-after-free can cause a service crash, enabling local escalation of privilege with no extra execution privileges required and no user interaction. The issue is evidenced across multiple sources (NVD, Red Hat, CVE List). The underlyi...

CVE-2022-20180

CVE-2022-20180 describes an elevation of privilege in Android kernel code, arising from a missing bounds check in mali_gralloc_reference.cpp that can allow arbitrary code execution on a local basis. The impact is local privilege escalation with high confidentiality/integrity/availability implicat...

CVE-2022-20193

Summary: CVE-2022-20193 affects Android 12L, in getUniqueUsagesWithLabels of PermissionUsageHelper.java, where a logic error could cause incorrect permission attribution. This may allow local escalation of privilege by conflating apps with User execution privileges. Impact : requires user interac...

CVE-2022-20207

CVE-2022-20207 affects Android 12L via the static definition in GattServiceConfig.java , where an insecure default value permits a permission bypass leading to local elevation of privilege without user interaction. The issue is described across multiple sources (Android/Red Hat/NVD entries) as a ...

CVE-2022-20525

CVE-2022-20525 affects Android 13 and points to a permissions bypass in enforceVisualVoicemailPackage inside PhoneInterfaceManager.java, causing a leak of the visual voicemail package name. The impact is local elevation of privilege with no extra execution privileges and no user interaction requi...

CVE-2022-20538

Summary: CVE-2022-20538 affects Android 13 in the getSmsRoleHolder path of RoleService.java. A side-channel information disclosure can let an attacker determine if an app is installed without query permissions, enabling local information disclosure with no extra execution privileges and no user i...

CVE-2022-20543

CVE-2022-20543 affects Android-13 on Google Pixel devices. The issue is a display crash loop caused by improper input validation in multiple locations, enabling local denial of service with system execution privileges required. Exploitation is local with no user interaction. The Pixel bulletin in...

CVE-2022-20579

CVE-2022-20579 concerns Android devices with the rild_exynos/ril service legacy code. The issue is described as a stack clash in RadioImpl::setCdmaBroadcastConfig within ril_service_legacy.cpp that can cause memory corruption. The resulting impact is local escalation of privilege, granting System...

CVE-2023-21052

CVE-2023-21052 affects the Android kernel component ril_external_client.cpp (setToExternal). The issue is an out-of-bounds write caused by a missing bounds check in that function, enabling local privilege escalation with system-level execution privileges and no user interaction required. Exploita...

CVE-2023-21062

CVE-2023-21062 describes an out-of-bounds read in the Android kernel, triggered by an incorrect bounds check in the DoSetTempEcc function of imsservice.cpp. The vulnerability can enable local escalation of privilege with System execution privileges required, and exploitation does not require user...

CVE-2023-21075

CVE-2023-21075 affects the Android kernel; the vulnerability is in get_svc_hash inside nan.cpp, caused by an out-of-bounds write due to a heap buffer overflow. The impact is local elevation of privilege with System-level execution privileges required; exploitation is possible without user interac...

CVE-2023-21236

CVE-2023-21236 affects the Android kernel in the aoc_service_set_read_blocked function of aoc.c, where a missing bounds check enables an out-of-bounds write. This can lead to local elevation of privileges requiring System level execution. The vulnerability is associated with Android kernel compon...

CVE-2023-35686

The CVE-2023-35686 vulnerability affects PVRSRVRGXKickTA3DKM in rgxta3d.c, where improper input validation allows arbitrary code execution and local privilege escalation in the kernel. Exploitation is described as local with no additional privileges and no user interaction required. Multiple conn...

CVE-2023-48348

CVE-2023-48348 concerns an issue in a video decoder where improper input validation can cause an out-of-bounds write, leading to a local denial of service with no extra privileges. The Red Hat and NVD entries describe the same vulnerability, and Android-related advisories (including Unisoc-listed...