CVE-2022-20032

The CVE-2022-20032 entry concerns the vow driver, where a race condition may trigger memory corruption that could disclose local information and potentially grant SYSTEM-level execution privileges. Exploitation reportedly requires no user interaction. A patch/mitigation is listed as ALPS05852822 ...

CVE-2022-20156

CVE-2022-20156 is an elevation-of-privilege vulnerability in Android’s graphics path: specifically, an issue in the unflatten path of GraphicBuffer.cpp that allows arbitrary code execution via improper input validation. Exploitation is local and does not require user interaction. The impact is st...

CVE-2022-20525

CVE-2022-20525 affects Android 13 and points to a permissions bypass in enforceVisualVoicemailPackage inside PhoneInterfaceManager.java, causing a leak of the visual voicemail package name. The impact is local elevation of privilege with no extra execution privileges and no user interaction requi...

CVE-2022-20558

CVE-2022-20558 affects Android 13. The vulnerability resides in DeviceCapabilityListener.java (registerReceivers) and can bypass permissions to change the preferred TTY mode, enabling local privilege escalation with no extra execution privileges and no user interaction. The issue is documented in...

CVE-2022-20569

CVE-2022-20569 affects the Android kernel, specifically the thermal cooling device stats update path in the thermal_sysfs.c driver. The issue is described as an out-of-bounds write caused by improper input validation in the function thermal_cooling_device_stats_update, which could lead to local e...

CVE-2022-27822

CVE-2022-27822 describes an information-disclosure vulnerability in Samsung SMR (system patch package). Prior to SMR Apr-2022 Release 1, the ril property setting could expose EF_RUIMID without permission. Documented across multiple feeds (NVD entries and security notices) with affected product sc...

CVE-2022-39131

The CVE-2022-39131 entry concerns a memory corruption issue in a camera driver caused by improper locking, leading to local denial of service in the kernel. The affected component is described as the camera driver (no specific vendor/model in the provided documents). The root cause is improper sy...

CVE-2022-42508

CVE-2022-42508 affects Android kernel components via ProtocolCallBuilder::BuildSendUssd, where a missing bounds check enables an out-of-bounds write. This can lead to local elevation of privilege with SYSTEMExecution privileges required; exploitation does not require user interaction. The availab...

CVE-2022-42519

CVE-2022-42519 affects the Android kernel component, specifically In CdmaBroadcastSmsConfigsRequestData::encode in cdmasmsdata.cpp. The root cause is a stack clash that can lead to memory corruption, enabling local escalation of privilege with SYSTEM privileges required; exploitation requires no ...

CVE-2022-42528

CVE-2022-42528 affects Android kernel (ffa_mrd_prot in shared_mem.c). A logic error can cause local information disclosure without additional privileges, with no user interaction required. The vulnerability is documented across multiple sources (Android Pixel kernel context, Red Hat/GNU reference...

CVE-2023-20989

CVE-2023-20989 is a vulnerability in the Android Bluetooth stack. In the function btm_ble_write_adv_enable_complete within btm_ble_gap.cc , there is an out-of-bounds read due to a missing bounds check. This can lead to local information disclosure and may require System privileges for exploitatio...

CVE-2023-21041

CVE-2023-21041 affects the Android kernel, specifically the function sequence in param_util.c ’s append_to_params . The description states an out-of-bounds write caused by an incorrect bounds check, potentially enabling local privilege escalation with no additional execution privileges and no use...

CVE-2023-21075

CVE-2023-21075 affects the Android kernel; the vulnerability is in get_svc_hash inside nan.cpp, caused by an out-of-bounds write due to a heap buffer overflow. The impact is local elevation of privilege with System-level execution privileges required; exploitation is possible without user interac...

CVE-2023-48348

CVE-2023-48348 concerns an issue in a video decoder where improper input validation can cause an out-of-bounds write, leading to a local denial of service with no extra privileges. The Red Hat and NVD entries describe the same vulnerability, and Android-related advisories (including Unisoc-listed...

CVE-2025-27701

A NULL pointer dereference vulnerability exists in the process_crypto_cmd function within Google Pixel software. The issue arises because values in ptrs[i] can be NULL after calling slice_map_array(), yet they are subsequently dereferenced without a prior NULL check . This flaw can lead to a loca...

CVE-2014-9892

The CVE-2014-9892 issue affects the Linux kernel (up to 4.7) in the snd_compr_tstamp path used by Android on Nexus 5/7 devices. Root cause: snd_compr_tstamp does not initialize a timestamp data structure, enabling a crafted app to obtain sensitive information. Impact: information disclosure possi...

CVE-2015-6646

CVE-2015-6646 affects the Android/Linux kernel System V IPC implementation. The issue allows local attackers to cause a denial of service through global kernel resource consumption due to improper interaction between IPC resource allocation and the memory manager (internal bug 22300191). The Nexu...

CVE-2017-6274

CVE-2017-6274 affects NVIDIA Tegra kernel: CORE DVFS thermal driver missing bounds checks can cause an out-of-bounds write in the kernel. Documents indicate impact as denial of service or privilege escalation. Affected products are Jetson TX1/TX2 with Linux for Tegra; remediation is to update to ...

CVE-2019-2016

CVE-2019-2016 affects Android: the issue is in NFA_SendRawFrame within nfa_dm_api.cc, where improper input validation can cause an out-of-bounds write. This can lead to local privilege escalation with no additional privileges required, and exploitation requires user interaction. Affected Android ...

CVE-2019-9465

CVE-2019-9465 concerns the Titan M secure hardware in Android 10. The issue is a possible information disclosure due to an unusual root cause affecting cryptographic operations, enabling local information disclosure without additional execution privileges and without user interaction. Affected co...

CVE-2020-0455

CVE-2020-0455 is an out-of-bounds write caused by a missing bounds check in the MediaTek vcu component (MediaTek MTK ALPS05324771) within Android. The issue is listed under Android’s 2020-12 security bulletin with patches recommended for patch levels 2020-12-01 or later; exact affected device mod...

CVE-2021-0948

CVE-2021-0948 affects the PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver. The issue allows returning uninitialized kernel memory to user space, meaning the contents of that memory could disclose sensitive information. Supported by multiple connected sources (NVD/Red Hat/CVE ecosy...

CVE-2021-39762

CVE-2021-39762 affects tremolo in Android 12L. Root cause: integer overflow causing an out-of-bounds read. Consequence: remote information disclosure without user interaction or extra privileges. Exploitation details are not provided in the documents, but the Android 12L security release notes in...

CVE-2022-20035

CVE-2022-20035 involves the vcu driver and an information-disclosure use-after-free vulnerability that could allow local escalation to System privileges. The issue does not require user interaction. Affected component: vcu driver. Root cause: use-after-free leading to partial confidentiality impa...

CVE-2022-20050

The CVE-2022-20050 entry refers to a vulnerability in connsyslogger where improper link resolution enables symbolic link following, leading to local escalation of privilege with System execution privileges required. Exploitation is described as local with no user interaction needed. Affected comp...

CVE-2022-20054

The CVE-2022-20054 issue affects the ims service, with a missing permission check enabling a possible AT command injection that could allow local escalation of privilege without additional execution privileges or user interaction. Affected context is MediaTek-based platforms (as per multiple sour...

CVE-2022-20096

The CVE-2022-20096 entry concerns MediaTek devices’ camera component (affecting multiple chips such as MT6765/6768/6769/8183/8185/8385/8666/8667/8768/8786/8788/8789).根 The root cause is uninitialized data in the camera path, enabling local information disclosure. Reported impact: potential local ...

CVE-2022-20231

CVE-2022-20231 affects the Android kernel on at least some Pixel/Android devices. The issue is an out-of-bounds write in smc_intc_request_fiq within arm_gic.c, caused by improper input validation, enabling local escalation of privilege with System execution privileges required; no user interactio...

CVE-2022-20538

Summary: CVE-2022-20538 affects Android 13 in the getSmsRoleHolder path of RoleService.java. A side-channel information disclosure can let an attacker determine if an app is installed without query permissions, enabling local information disclosure with no extra execution privileges and no user i...

CVE-2022-20579

CVE-2022-20579 concerns Android devices with the rild_exynos/ril service legacy code. The issue is described as a stack clash in RadioImpl::setCdmaBroadcastConfig within ril_service_legacy.cpp that can cause memory corruption. The resulting impact is local escalation of privilege, granting System...

CVE-2022-25819

CVE-2022-25819 is an OOB read vulnerability in the hdcp2 device node prior to Samsung SMR Mar-2022 Release 1, allowing an attacker to view kernel stack memory. Affected component: hdcp2 device node; root cause: out-of-bounds read. Impact: potential kernel memory exposure. Remediation: Samsung pro...

CVE-2022-33723

CVE-2022-33723 concerns a vulnerable code path in the BluetoothScanDialog component on Android/Samsung devices. The issue is located in the onCreate method of BluetoothScanDialog, where an attacker could trick a user into selecting an unwanted Bluetooth device via a tapjacking/overlay attack. Aff...

CVE-2022-39912

CVE-2022-39912 describes an improper handling of permissions in the Android PersonaManagerService; prior to Android T(13), setSecureFolderPolicy can be exploited locally to modify settings in Secure Folder. The issue arises from insufficient permission checks in the affected function, enabling a ...

CVE-2023-48402

CVE-2023-48402 refers to a local elevation-of-privilege in the ppcfw_enable function of ppcfw.c due to a missing permission check. Exploitation requires no user interaction and could grant higher privileges on the device. Multiple sources (including Red Hat and NVD entries) corroborate the same d...

CVE-2024-27222

Google Pixel devices are affected by an Elevation of Privilege (EoP) vulnerability in the settings component. The flaw exists in the onSkipButtonClick method of FaceEnrollFoldPage.java , where an Intent Redirect GRANT_URI_PERMISSIONS Attack could allow an attacker to access files that the applica...

CVE-2024-29741

A logic error in the pblS2mpuResume function of s2mpu.c within the S2MPU subcomponent of Google Pixel devices allows for a possible mitigation bypass. This vulnerability can lead to a local elevation of privilege (EoP) without requiring additional execution privileges or user interaction. The iss...

CVE-2024-29752

A security vulnerability exists in the ACPM subcomponent of Google Pixel devices due to a missing bounds check in the tmu_set_tr_num_thresholds function of the tmu.c file. This flaw can lead to an out-of-bounds write , potentially allowing for local escalation of privilege (EoP) without requiring...

CVE-2024-32930

A vulnerability exists in the slc_plugin.c component, specifically within the plugin_ipc_handler function, due to the use of uninitialized data . This flaw could allow for local information disclosure of 4 bytes of stack memory without requiring additional execution privileges or user interaction...

CVE-2026-0075

A local elevation-of-privilege vulnerability exists in Android's ContactsProvider2 component. Multiple functions are susceptible to SQL injection , which could allow an attacker to access the contacts database without requiring additional execution privileges or user interaction. Affected AOSP ve...

CVE-2008-7298

The CVE-2008-7298 entry concerns the Android browser. It describes a vulnerability where the browser cannot properly restrict modifications to cookies established during HTTPS sessions, enabling a man-in-the-middle to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP respon...

CVE-2015-3108

CVE-2015-3108 describes a memory disclosure vulnerability in Adobe Flash Player and related AIR components that bypasses ASLR by not properly restricting discovery of memory addresses. Affected products include Flash Player on Windows, macOS, and Linux (versions listed in the entry), and Adobe AI...

CVE-2015-3832

CVE-2015-3832: Affects Android devices with vulnerable libstagefright code (MPEG4Extractor.cpp) prior to 5.1.1 LMY48I. Multiple buffer overflows allow remote attackers to execute arbitrary code via invalid NAL unit size values in MP4 data; the vulnerability is tied to the MP4/Stagefright processi...

CVE-2017-13165

CVE-2017-13165 is an elevation-of-privilege vulnerability in the Android kernel file system, affecting the Android kernel (Android ID A-31269937). It is documented across multiple sources (NVD, OSV/UBUNTU-CVE/CNVD) as an EoP issue. The Pixel/Nexus security bulletin lists CVE-2017-13165 under Kern...

CVE-2018-9439

A use-after-free vulnerability exists in the Linux kernel 's network stack (specifically within __unregister_prot_hook and packet_release functions of af_packet.c) due to improper locking . This flaw could allow an attacker with System execution privileges to achieve a local escalation of privile...

CVE-2019-1988

CVE-2019-1988 affects Android Framework related to a vulnerability in PNG handling. In SkSwizzler.cpp, a possible out-of-bounds write due to improper input validation could lead to remote code execution in the system_server, requiring user interaction to exploit. Affected Android versions include...

CVE-2020-0229

CVE-2020-0229 is an out-of-bounds write due to an incorrect bounds check in Android components, specifically affecting MediaTek mdla in the 2020-09-01/05 patch window. The vulnerability is categorized as High/CRITICAL impact with network attack requirements and no user interaction, per the NVD en...

CVE-2020-0454

Summary: CVE-2020-0454 affects Android 9 (Android-9) via the ConnectivityService.java callCallbackForRequest, enabling a local attacker with LOW privileges to bypass a permission check and disclose the current SSID without user interaction. Exploitation is localized to the device; no remote acces...

CVE-2021-26689

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2021-39760

CVE-2021-39760 is described as a side-channel information disclosure in Android’s AudioService that can reveal whether an app is installed without query permissions. The impact is local information leakage with no extra execution privileges; user interaction is not required. Related connected doc...

CVE-2022-20034

CVE-2022-20034 refers to a vulnerability in Preloader XFLASH on MediaTek devices caused by improper certificate validation, enabling local privilege escalation if an attacker has physical access and no extra privileges or user interaction are required. Connected documents corroborate the issue as...