CVE-2022-33726

CVE-2022-33726 involves Samsung Galaxy Friends prior to the SMR Aug-2022 Release 1, where an unprotected dynamic receiver enables an attacker to launch an activity. The vulnerability arises from an unprotected component that can be invoked by local attackers, leading to unintended activity initia...

CVE-2022-48459

CVE-2022-48459 affects TeleService, where improper input validation can trigger a system crash, causing local denial of service without requiring additional privileges. The NVD entry records a CVSS v3.1 base score of 5.5 (Attack Vector: Local, Attack Complexity: Low, Privileges Required: Low, Use...

CVE-2023-20997

CVE-2023-20997 concerns Android 13 where multiple locations allow triggering a persistent reboot loop due to improper input validation. This yields local denial of service with user execution privileges required, and no user interaction is needed for exploitation. The issue is documented as a DoS...

CVE-2023-21069

Summary: CVE-2023-21069 affects the Android kernel (bcm4389 driver) in the wl_update_hidden_ap_ie function of wl_cfgscan.c, causing an out-of-bounds write due to a missing bounds check. This enables local escalation of privilege (System level) without user interaction. Technical details confirmed...

CVE-2023-32877

CVE-2023-32877 affects MediaTek battery module with a missing bounds check causing an out-of-bounds write. This can enable local escalation of privilege with System execution privileges required; exploitation does not require user interaction. The provided documents consistently reference the iss...

CVE-2023-35656

CVE-2023-35656 affects the Android protocol stack component protocolembmsadapter.cpp, where a missing bounds check enables an out-of-bounds read. This trust boundary flaw can cause remote information disclosure without user interaction, as described across multiple CVE feeds. The available docume...

CVE-2023-35686

The CVE-2023-35686 vulnerability affects PVRSRVRGXKickTA3DKM in rgxta3d.c, where improper input validation allows arbitrary code execution and local privilege escalation in the kernel. Exploitation is described as local with no additional privileges and no user interaction required. Multiple conn...

CVE-2023-48401

CVE-2023-48401 affects the protocoladapter.cpp function GetSizeOfEenlRecords, causing an out-of-bounds read and potential local information disclosure with no user interaction. The available documents consistently describe the root cause as a bounds-check error and do not provide explicit exploit...

CVE-2023-52342

A security vulnerability exists in UNISOC Chipsets (Purple Spreadtrum) within the modem-ps-nas-ngmm module. The flaw stems from incorrect error handling , which can lead to undefined behavior . This vulnerability may allow for remote information disclosure without requiring additional execution p...

CVE-2023-52533

A security vulnerability exists in UNISOC Chipsets within the modem-ps-nas-ngmm module. The flaw stems from incorrect error handling , which can lead to undefined behavior . This vulnerability could potentially result in remote information disclosure without requiring additional execution privile...

CVE-2024-20050

A security vulnerability exists in the flashc module within MediaTek chips. The issue is caused by an uncaught exception , which could lead to local information disclosure . Exploitation requires System execution privileges and does not require user interaction. While the technical impact is clas...

CVE-2024-29780

CVE-2024-29780 affects hwbcc_ns_deprivilege in trusty/user/base/lib/hwbcc/client/hwbcc.c, describing an uninitialized data condition that can disclose uninitialized stack data. The impact is local information disclosure with no extra privileges required and no user interaction needed. Exploitatio...

CVE-2024-32904

CVE-2024-32904 concerns the ProtocolVsimOperationAdapter() function in protocolvsimadapter.cpp, where a missing bounds check can cause an out-of-bounds read. This may lead to local information disclosure with the requirement of baseband firmware compromise for exploitation, and no user interactio...

CVE-2024-32925

A security vulnerability exists in the wlan subcomponent of Google Pixel devices. Specifically, a missing bounds check in the dhd_prot_txstatus_process function of dhd_msgbuf.c can lead to an out-of-bounds write . This flaw could allow for remote code execution (RCE) without requiring additional ...

CVE-2024-56188

A security vulnerability exists in the Modem component of Google Pixel devices due to a missing null pointer check . This flaw could lead to a remote denial of service (DoS) without requiring additional execution privileges or user interaction. To address this issue, users should update their dev...

CVE-2013-7372

The engineNextBytes function in the SecureRandom implementation within Apache Harmony (through version 6.0M3 ) contains a logic flaw. When no user seed is provided, the component uses an incorrect offset value , leading to PRNG predictability . This vulnerability affects the Java Cryptography Arc...

CVE-2018-9339

CVE-2018-9339 affects Android’s framework Parcel.java, specifically in the methods writeTypedArrayList/readTypedArrayList, with a root cause of type confusion that enables local privilege escalation. The vulnerability can be exploited with no user interaction and requires local access. Public doc...

CVE-2021-0873

CVE-2021-0873 : A missing size check in PVRSRVBridgeRGXKickRS within the PowerVR kernel driver can cause an integer overflow, enabling out-of-bounds heap access. This may permit local escalation of privilege with no additional execution privileges required and without user interaction. The issue ...

CVE-2021-1004

CVE-2021-1004 affects Android 12, via a missing permission check in getConfiguredNetworks() of WifiServiceImpl.java that can allow an app to determine whether another app is installed without query permissions. This is a local privilege escalation (no user interaction required) per the descriptio...

CVE-2021-39653

CVE-2021-39653 describes a local elevation of privilege in the Android boot path, enabling boot with a hidden debug policy due to a missing user warning. The vulnerability is associated with the Android kernel/Bootloader surface (as reflected in Pixel bulletin categorization), and iled by the des...

CVE-2021-39781

CVE-2021-39781 affects Android 12L with a vulnerability in SmsController permitting information disclosure via a permissions bypass, enabling local escalation of privilege and SMS sending without extra privileges. The issue is documented in Android 12L security release notes; mitigation is provid...

CVE-2022-20040

The CVE-2022-20040 entry concerns a vulnerability in the MediaTek power_hal_manager_service (Power HAL) where a stack-based buffer overflow can permit local escalation of privilege without user interaction. Exploitation requires local access and the issue is described across multiple sources (e.g...

CVE-2022-20067

CVE-2022-20067 affects mdp with an out-of-bounds write caused by a missing bounds check, enabling local escalation to SYSTEM privileges without user interaction. Exploitation details are not provided in the documents, but multiple sources confirm the issue and reference patch ALPS05836585 (Issue ...

CVE-2022-20074

CVE-2022-20074 concerns a boundary-check omission in the preloader (partition) of MediaTek devices, causing an out-of-bounds write that can enable local privilege escalation with physical access and user interaction required for exploitation. Affected component: preloader partition code on MediaT...

CVE-2022-20079

The CVE-2022-20079 entry concerns the vow component. Root cause: improper input validation enables a read of uninitialized data, causing local information disclosure with system execution privileges required; user interaction is not required. A patch is listed (ALPS05837742; ALPS05857289). Connec...

CVE-2022-20176

CVE-2022-20176 affects the Android kernel, specifically the sjtag-driver.c module in the auth_store path. The root cause is a missing bounds check that allows a read of uninitialized memory. This can lead to a local information disclosure and, per the description, may enable system-level executio...

CVE-2022-20194

CVE-2022-20194 affects Android 12L. The vulnerability arises in the onCreate of ChooseLockGeneric.java, enabling a local elevation of privilege through a permission bypass that does not require user interaction. The impact is limited to elevation of privileges on the device. Remediation per the P...

CVE-2022-20202

CVE-2022-20202 affects Android 12L via the function ih264_resi_trans_quant_4x4_sse42 (ih264_resi_trans_quant_sse42.c). It describes a heap buffer overflow that enables a possible out-of-bounds read, leading to remote information disclosure with no default execution privileges; exploitation requir...

CVE-2022-20372

The Android kernel is vulnerable to an out of bounds write caused by a use after free in the exynos5_i2c_irq function. This flaw could lead to local escalation of privilege (EoP) and requires System execution privileges for exploitation. No user interaction is required. This vulnerability affects...

CVE-2022-20375

CVE-2022-20375 affects the Android kernel: in LteRrcNrProAsnDecode (LteRrcNr_Codec.c) there is a possible out-of-bounds read due to a missing bounds check, enabling remote denial of service without user interaction. The vulnerability is categorized in public resources as a DoS issue impacting the...

CVE-2022-20403

CVE-2022-20403 targets Google Pixel devices via the Android modem component. The Pixel security bulletin classifies it as RCE (critical) in the Modem with a high impact; the NVD entry records a CVSSv3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The initial records list Product: And...

CVE-2022-20443

CVE-2022-20443 concerns Android 13 where the hasInputInfo function in Layer.cpp may bypass user interaction via a tapjacking/overlay attack, enabling local escalation of privilege with no extra execution privileges and no user interaction required for exploitation. Affected product: Android 13 (A...

CVE-2022-20533

Android 13 contains a local privilege escalation risk in WifiSlice.java (getSlice). A missing permission check could allow an attacker with local access to connect to a new WiFi network from guest mode, with no user interaction required. Public documents confirm the issue but do not provide patch...

CVE-2022-20588

CVE-2022-20588 affects the Android kernel in the sysmmu_map function of sysmmu.c. The issue is a precondition check failure that can enable local elevation of privilege, granting System execution privileges. Exploitation details are not provided in the supplied documents; no user interaction is r...

CVE-2022-20595

In CVE-2022-20595, the issue is in the Android kernel’s WirelessCharger.cpp getWpcAuthChallengeResponse function. It describes an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with System privileges required. Public references confirm the affected comp...

CVE-2022-20609

CVE-2022-20609 involves a local information-disclosure vulnerability in Pixel cellular firmware due to a missing bounds check that allows an out-of-bounds read. Exploitation requires local access; no user interaction is needed. The issue is described for the Pixel/Android kernel domain, but the p...

CVE-2022-21753

CVE-2022-21753 affects a WLAN driver where a missing bounds check can cause an out-of-bounds write, enabling local escalation to SYSTEM privileges with no user interaction. This is described across sources (NVD/Red Hat/CVE list) as a local-privilege-escalation issue in the WLAN driver, with the p...

CVE-2022-22270

CVE-2022-22270 is an implicit Intent hijacking vulnerability in Samsung Dialer prior to SMR Jan-2022 Release 1 that allows unprivileged apps to access contact information. Affected: Samsung Dialer on Samsung Android devices; root cause is improper handling of implicit intents in the Dialer. Impac...

CVE-2022-27834

CVE-2022-27834: Use-after-free in the DSP driver’s dsp_context_unload_graph function (pre-SMR Apr-2022 Release 1). Affects the DSP driver; attackers could cause malicious actions. Root cause: use-after-free in the affected function. CVSS details show high impact under CVSS 3.1 (LOCAL, HIGH impact...

CVE-2022-30726

CVE-2022-30726 corresponds to an unprotected DeviceSearchTrampoline component in Samsung SecSettingsIntelligence, enabling local attackers to launch SecSettingsIntelligence activities. Affected: Samsung Mobile/SecSettingsIntelligence (DeviceSearchTrampoline). Root cause: unprotected component exp...

CVE-2022-33703

CVE-2022-33703 refers to an improper validation vulnerability in Samsung CACertificateInfo before the SMR July-2022 Release 1, enabling an elevation of privilege by exploiting faulty authentication logic. Public sources consistently describe the impact as attackers being able to "launch certain a...

CVE-2022-42512

CVE-2022-42512 affects the Android kernel component in VsimOperationDataExt::encode (vsimdata.cpp). The issue is an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with System privileges; no user interaction needed. Connected sources confirm the vulnerab...

CVE-2022-42516

CVE-2022-42516 affects Android kernel in ProtocolSimBuilderLegacy::BuildSimGetGbaAuth. The flaw is an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with System privileges (no user interaction required). Exploitation and impact are described in multiple...

CVE-2022-42544

CVE-2022-42544 concerns a local-privilege-escalation issue in Android 13 stemming from getView() in AddAppNetworksFragment.java. The vulnerability arises from improper input validation that can mislead users about network add requests, with exploitation possible without extra privileges or user i...

CVE-2023-21148

CVE-2023-21148 describes a vulnerability in the BuildSetConfig function of protocolimsbuilder.cpp where a missing null check can cause an out-of-bounds read. This could allow local information disclosure with System-level execution privileges required, and exploitation does not require user inter...

CVE-2023-21194

The CVE-2023-21194 entry concerns Android 13 Bluetooth stack (gatt_utils.cc: gatt_dbg_op_name). A missing bounds check allows an out-of-bounds read, enabling local information disclosure via the Bluetooth server. Exploitation requires System privileges; no user interaction is needed. Public detai...

CVE-2023-21358

CVE-2023-21358 affects Google Android UWB: a malicious app can masquerade as the system app com.android.uwb.resources due to improper crypto usage, enabling local elevation of privilege with no extra execution privileges and no user interaction required. CVSSv3.1 base score 7.8 (HIGH) with LOCAL ...

CVE-2023-48341

CVE-2023-48341 affects the video decoder. The issue is an out-of-bounds read caused by improper input validation, which could lead to a local denial of service without requiring additional privileges. The provided documents do not specify a fix or remediation details, and exploitation status is n...

CVE-2023-48351

CVE-2023-48351 affects Unisoc Android video decoder; root cause is a missing bounds check causing an out-of-bounds write, leading to local denial of service. Public exploit details are not provided in the supplied documents. Remediation inferred from the Android bulletin: apply security patch lev...

CVE-2023-48407

CVE-2023-48407 affects Google Pixel bootloader: a logic error may prevent the DCK from being deleted after factory reset, enabling local elevation of privilege with no user interaction. Exploitation details are not provided in the documents; the Pixel update bulletin lists CVE-2023-48407 as a boo...