CVE-2021-0592

CVE-2021-0592 is a Widevine DRM code-execution vulnerability described across multiple sources as out-of-bounds writes caused by improper input validation in WideVine. The NVD entry lists a network attack vector with high impact and a base CVSS v3 score of 8.8 (I:H, A:H, C:H) and notes that user ...

CVE-2023-48348

CVE-2023-48348 concerns an issue in a video decoder where improper input validation can cause an out-of-bounds write, leading to a local denial of service with no extra privileges. The Red Hat and NVD entries describe the same vulnerability, and Android-related advisories (including Unisoc-listed...

CVE-2024-20049

CVE-2024-20049 affects the flashc component in MediaTek-chip devices. The vulnerability is caused by an uncaught exception in flashc, enabling possible local information disclosure with System privileges required for exploitation; no user interaction is needed. A patch is available (Patch ID: ALP...

CVE-2024-29741

The CVE-2024-29741 issue affects Google Pixel’s s2mpu.c driver, specifically the pblS2mpuResume function, where a logic error enables a mitigation bypass. This could allow local elevation of privilege without additional execution privileges or user interaction. Multiple connected sources corrobor...

CVE-2015-3108

CVE-2015-3108 describes a memory disclosure vulnerability in Adobe Flash Player and related AIR components that bypasses ASLR by not properly restricting discovery of memory addresses. Affected products include Flash Player on Windows, macOS, and Linux (versions listed in the entry), and Adobe AI...

CVE-2015-6646

CVE-2015-6646 affects the Android/Linux kernel System V IPC implementation. The issue allows local attackers to cause a denial of service through global kernel resource consumption due to improper interaction between IPC resource allocation and the memory manager (internal bug 22300191). The Nexu...

CVE-2015-6783

CVE-2015-6783 affects Google Chrome components on Android 5.x–6.x that use Crazy Linker. The vulnerability is in crazy_linker_zip.cpp FindStartOffsetOfFileInZipFile, where EOCD record search is faulty, allowing signature-validation bypass via a crafted ZIP archive. Public docs confirm this CVE wa...

CVE-2016-5340

CVE-2016-5340 is tied to a vulnerability in the KGSL Linux Graphics Module exposed by a QuIC Android patch for Linux kernel 3.x. The issue arises from the function is_ashmem_file in drivers/staging/android/ashmem.c, where pointer validation is mishandled. This design flaw can allow an attacker to...

CVE-2019-2018

CVE-2019-2018 affects Android devices via a bypass in resetPasswordInternal in DevicePolicyManagerService.java. The vulnerability allows bypass of password reset protection, with remote exploitation requiring user interaction. Affected Android versions are 8.1 and 9. The issue is documented in th...

CVE-2020-0045

CVE-2020-0045 affects Android 10 framework components. The vulnerability is in StatsService::command where a race condition can cause memory corruption, enabling local escalation of privilege with System execution privileges required. Exploitation is described as local (AV:L, UI:N) with no user i...

CVE-2020-0229

CVE-2020-0229 is an out-of-bounds write due to an incorrect bounds check in Android components, specifically affecting MediaTek mdla in the 2020-09-01/05 patch window. The vulnerability is categorized as High/CRITICAL impact with network attack requirements and no user interaction, per the NVD en...

CVE-2020-0454

Summary: CVE-2020-0454 affects Android 9 (Android-9) via the ConnectivityService.java callCallbackForRequest, enabling a local attacker with LOW privileges to bypass a permission check and disclose the current SSID without user interaction. Exploitation is localized to the device; no remote acces...

CVE-2021-0468

CVE-2021-0468 maps to an elevation of privilege in LK (Little Kernel) used on Android devices. The root cause is an insecure default value in LK, enabling local privilege escalation when an attacker has physical access and no additional execution privileges are required; exploitation may require ...

CVE-2021-39762

CVE-2021-39762 affects tremolo in Android 12L. Root cause: integer overflow causing an out-of-bounds read. Consequence: remote information disclosure without user interaction or extra privileges. Exploitation details are not provided in the documents, but the Android 12L security release notes in...

CVE-2021-39810

CVE-2021-39810 affects Android’s NFC/payment stack (CardEmulationManager.verifyDefaults). The root cause is a missing permission check that can allow a third-party app to be set as the default contactless payment app without user consent. This could enable local elevation of privilege, with explo...

CVE-2022-20032

The CVE-2022-20032 entry concerns the vow driver, where a race condition may trigger memory corruption that could disclose local information and potentially grant SYSTEM-level execution privileges. Exploitation reportedly requires no user interaction. A patch/mitigation is listed as ALPS05852822 ...

CVE-2022-20054

The CVE-2022-20054 issue affects the ims service, with a missing permission check enabling a possible AT command injection that could allow local escalation of privilege without additional execution privileges or user interaction. Affected context is MediaTek-based platforms (as per multiple sour...

CVE-2022-20073

CVE-2022-20073 affects the preloader (usb) on MediaTek devices, where an integer underflow can trigger an out-of-bounds write. This can enable local escalation of privilege for an attacker with physical device access, with user interaction required for exploitation. The issue is documented with P...

CVE-2022-20088

The CVE-2022-20088 entry concerns the aee driver, where a reference count handling error may allow local privilege escalation to System level without user interaction. The issue is tied to incorrect error handling that can lead to a reference count mistake. A patch is identified as ALPS06209201 (...

CVE-2022-20156

CVE-2022-20156 is an elevation-of-privilege vulnerability in Android’s graphics path: specifically, an issue in the unflatten path of GraphicBuffer.cpp that allows arbitrary code execution via improper input validation. Exploitation is local and does not require user interaction. The impact is st...

CVE-2022-20162

CVE-2022-20162 is an information-disclosure flaw in the Android kernel’s crypto/asn1.c, specifically in the function asn1_p256_int, where an incorrect bounds check allows an out-of-bounds read. The impact is local information disclosure with system privileges required; exploitation requires no us...

CVE-2022-20164

CVE-2022-20164 is listed in the Pixel security bulletin as an Elevation of Privilege (EoP) affecting the Modem component, tied to the Android kernel. The connected Pixel bulletin entry confirms the issue is categorized as EoP for Modem with no public exploit details provided in the documents. The...

CVE-2022-20174

CVE-2022-20174 affects the Android kernel on Exynos GS101. The issue is in the function exynos_secEnv_init in mach-gs101.c , where an incorrect bounds check may cause an out-of-bounds read. This can lead to local information disclosure with system execution privileges required; exploitation is de...

CVE-2022-20183

CVE-2022-20183 affects the Android kernel, specifically the hypx_create_blob_dmabuf path in faceauth_hypx.c. The issue is a missing bounds check that leads to an out-of-bounds write. This could enable local escalation of privilege with System execution privileges required; no user interaction is ...

CVE-2022-20200

CVE-2022-20200 affects Android 12L’s SoftApManager.updateApState, where a missing permission check can leak hotspot state. This enables local information disclosure with no extra privileges and no user interaction. The vulnerability is documented across multiple sources (NVD/Red Hat/PRION/Pixel b...

CVE-2022-20371

Summary: CVE-2022-20371 affects the Android kernel, specifically the dm_bow_dtr path in dm-bow.c, due to a race-condition use-after-free. The vulnerability enables local escalation of privilege to System by exploiting a race condition, with no user interaction required. Documents consistently des...

CVE-2022-20404

CVE-2022-20404 is listed in Pixel bulletin data as affecting Android devices via the Modem component (Type: Information disclosure; Severity: Moderate). The vulnerable entry maps to CVE-2022-20404 with Android kernel context in the initial doc, but Pixel security bulletin categorizes it under the...

CVE-2022-20581

CVE-2022-20581 affects the Pixel camera driver in the Android kernel. The issue is a use-after-free caused by a logic error, enabling local escalation of privilege with System-level execution privileges required. No user interaction is needed for exploitation. Documented exposure is limited to th...

CVE-2022-23729

CVE-2022-23729 affects LG mobile devices when in factory state, allowing shell access without adb authentication. The issue is described consistently across multiple sources (NVD, Red Hat, CVE records, CNNVD) as an authentication flaw enabling direct shell access in factory mode. The Root Cause a...

CVE-2022-42519

CVE-2022-42519 affects the Android kernel component, specifically In CdmaBroadcastSmsConfigsRequestData::encode in cdmasmsdata.cpp. The root cause is a stack clash that can lead to memory corruption, enabling local escalation of privilege with SYSTEM privileges required; exploitation requires no ...

CVE-2023-20949

CVE-2023-20949 affects the Android kernel: in s2mpg11_pmic_probe() of s2mpg11-regulator.c there is a heap buffer overflow that can cause an out-of-bounds read, enabling local information disclosure without additional privileges. Exploitation is described as local (AV:L, AC:L, PR:L, UI:N, S:U) wit...

CVE-2023-21029

CVE-2023-21029 affects Android 13 via a missing permission check in UidObserverController.java register, enabling local information disclosure of app usage without user interaction. Root cause: inadequate access control in the registration flow. Impact: information disclosure with user privileges...

CVE-2023-21395

CVE-2023-21395 involves a Bluetooth use-after-free bug that can trigger an out-of-bounds read, enabling remote information disclosure without user interaction or additional privileges. The vulnerability is documented across multiple feeds (NVD entry authoring the Bluetooth impact; Red Hat and oth...

CVE-2023-35656

CVE-2023-35656 affects the Android protocol stack component protocolembmsadapter.cpp, where a missing bounds check enables an out-of-bounds read. This trust boundary flaw can cause remote information disclosure without user interaction, as described across multiple CVE feeds. The available docume...

CVE-2023-35662

CVE-2023-35662 is a Pixel/Shannon baseband vulnerability described as an out-of-bounds write due to a buffer overflow that could enable remote code execution with no user interaction. The issue is reported as a Critical RCE in Google Pixel security guidance, and the Pixel Update Bulletin lists th...

CVE-2023-35690

CVE-2023-35690 affects RGXDestroyHWRTData in rgxta3d.c and can cause arbitrary code execution leading to local kernel privilege escalation with no user interaction. Connected sources confirm the issue and its kernel-level impact; no exploit details are provided beyond that. Android’s December 202...

CVE-2023-48341

CVE-2023-48341 affects the video decoder. The issue is an out-of-bounds read caused by improper input validation, which could lead to a local denial of service without requiring additional privileges. The provided documents do not specify a fix or remediation details, and exploitation status is n...

CVE-2023-48401

CVE-2023-48401 affects the protocoladapter.cpp function GetSizeOfEenlRecords, causing an out-of-bounds read and potential local information disclosure with no user interaction. The available documents consistently describe the root cause as a bounds-check error and do not provide explicit exploit...

CVE-2023-52533

The CVE-2023-52533 entry concerns the modem-ps-nas-ngmm component, where incorrect error handling may cause undefined behavior. This could enable remote information disclosure without additional privileges. Public sources (NVD/Red Hat/CVE records) state the impact as information disclosure with n...

CVE-2024-29753

CVE-2024-29753 describes an out-of-bounds write in the function tmu_set_control_temp_step of tmu.c , caused by a missing bounds check. The issue enables local privilege escalation with no extra privileges and without user interaction. Connected sources identify this vulnerability within Google Pi...

CVE-2024-29783

The CVE-2024-29783 issue is described across multiple sources as a vulnerability in tmu_get_tr_thresholds where a missing bounds check may cause an out-of-bounds read, leading to local information disclosure with no required user interaction. Exploitation details are not provided in the connected...

CVE-2024-32895

CVE-2024-32895 affects the BCMFASTPATH component (dhd_msgbuf.c) with an out-of-bounds write caused by a missing bounds check. The documented impact is local elevation of privilege without additional execution privileges required, and exploitation reportedly requires no user interaction. Connected...

CVE-2024-32910

The CVE-2024-32910 issue affects Trusty/TEE in the Android stack (tipc.c: handle_msg_shm_map_req). It describes a possible stack data disclosure from uninitialized data in the SPI/TIPC path, enabling local information disclosure without extra privileges or user interaction. The Android Pixel bull...

CVE-2024-47023

CVE-2024-47023 is an elevation-of-privilege in the Pixel modem due to a logic error in the code. The vulnerability could allow remote escalation with no user interaction. Pixel bulletin entries show the issue as EoP in the Modem subcomponent and indicate that applying security patch level 2024-10...

CVE-2015-3101

CVE-2015-3101 describes a privilege-escalation path in the Flash broker when using Internet Explorer, affecting the Flash Player and related AIR components. The vulnerability is tied to a transition from Low Integrity to Medium Integrity via IE, with the impact (per the sources) being privilege e...

CVE-2017-0786

CVE-2017-0786 is an elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver affecting the Android kernel. Public records in the initial description identify the affected component as the Broadcom Wi‑Fi driver within the Android kernel and describe the issue as an elevation of privilege;...

CVE-2017-13165

CVE-2017-13165 is an elevation-of-privilege vulnerability in the Android kernel file system, affecting the Android kernel (Android ID A-31269937). It is documented across multiple sources (NVD, OSV/UBUNTU-CVE/CNVD) as an EoP issue. The Pixel/Nexus security bulletin lists CVE-2017-13165 under Kern...

CVE-2018-9341

CVE-2018-9341 affects the Android Media framework: in impeg2d_mc_fullx_fully of impeg2d_mc.c there is an out-of-bounds write due to a missing bounds check. This can lead to remote arbitrary code execution in the context of a privileged process, with user interaction required to exploit. Multiple ...

CVE-2018-9415

CVE-2018-9415 affects the Android kernel’s bus.c, specifically in driver_override_store and driver_override_show, where a double free can occur due to improper locking. This can enable local escalation of privilege to SYSTEM without user interaction. The vulnerability follows from upstream kernel...

CVE-2019-2017

CVE-2019-2017 : In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check, enabling local elevation of privilege with no additional execution privileges required. Exploitation requires user interaction. Affected are Android versions 7...