CVE-2021-39770

CVE-2021-39770 affects the Android Framework on Android 12L and is caused by a missing permission check that enables a local information disclosure of the device owner package. The vulnerability allows access to sensitive information without additional execution privileges and does not require us...

CVE-2022-20040

The CVE-2022-20040 entry concerns a vulnerability in the MediaTek power_hal_manager_service (Power HAL) where a stack-based buffer overflow can permit local escalation of privilege without user interaction. Exploitation requires local access and the issue is described across multiple sources (e.g...

CVE-2022-20056

CVE-2022-20056 affects the preloader (usb) on MediaTek-based devices, with an out-of-bounds write due to a missing bounds check. The issue can lead to local privilege escalation when an attacker has physical access, with user interaction required for exploitation. Impact is described as partial c...

CVE-2022-20071

CVE-2022-20071 affects the ccu component and is caused by missing certificate validation, enabling local escalation of privilege with System execution privileges. Exploitation is described as requiring no user interaction, with a local attack vector. The vulnerability details in connected sources...

CVE-2022-20091

CVE-2022-20091 describes a use-after-free due to a race condition in the MediaTek aee driver, enabling local escalation of privilege to SYSTEM with no user interaction required. The issue is documented with patch ALPS06209201 and issue ALPS06226345. Connected sources confirm this is a real, drive...

CVE-2022-20159

CVE-2022-20159 affects the Android kernel via the asn1_ec_pkey_parse function in acropora/crypto/asn1_common.c. The issue is an out-of-bounds read caused by an incorrect bounds check, which can lead to local information disclosure with system privileges (no user interaction required). Exploitatio...

CVE-2022-20177

CVE-2022-20177 affects the Android kernel. The vulnerability is in the Android kernel component of Android OS (no vendor/product details beyond Android kernel provided). NVD CVSS scores indicate CVSS v2 base score 5.0 (MEDIUM) with network attack vector, minimal impact on confidentiality as Parti...

CVE-2022-20204

CVE-2022-20204 concerns Android 12L where the function DevicePolicyManagerService.registerRemoteBugreportReceivers lacks a required permission check. The flaw allows forging bug reports, enabling local elevation of privilege with no additional execution privileges and no user interaction required...

CVE-2022-20383

CVE-2022-20383 affects the Android kernel via AllocateInternalBuffers in g3aa_buffer_allocator.cc, where an integer overflow can cause an out-of-bounds write. This enables local privilege escalation with no extra user interaction required. Documents indicate the issue exists in the Android kernel...

CVE-2022-20519

CVE-2022-20519 affects Android 13 in the AddAppNetworksActivity.java onCreate path. The root cause is a missing permission check that could let a guest user configure WiFi networks, enabling local elevation of privilege. Exploitation requires local access; no extra user interaction is needed. No ...

CVE-2022-20521

CVE-2022-20521 concerns a Bluetooth DoS in Android 13 caused by a missing null check in sdpu_find_most_specific_service_uuid (sdp_utils.cc). The vulnerability can crash Bluetooth, leading to local denial of service with no additional privileges required; exploitation requires user interaction. Do...

CVE-2022-20580

CVE-2022-20580 is an Android kernel/libufdt issue where an incorrect bounds check in the function ufdt_do_one_fixup within ufdt_overlay.c can cause an out-of-bounds write. This could enable a local escalation of privilege with System privileges required; no user interaction is described for explo...

CVE-2022-20588

CVE-2022-20588 affects the Android kernel in the sysmmu_map function of sysmmu.c. The issue is a precondition check failure that can enable local elevation of privilege, granting System execution privileges. Exploitation details are not provided in the supplied documents; no user interaction is r...

CVE-2022-21753

CVE-2022-21753 affects a WLAN driver where a missing bounds check can cause an out-of-bounds write, enabling local escalation to SYSTEM privileges with no user interaction. This is described across sources (NVD/Red Hat/CVE list) as a local-privilege-escalation issue in the WLAN driver, with the p...

CVE-2022-24929

Summary: CVE-2022-24929 affects Samsung AppLock (Android) prior to SMR Mar-2022 Release 1, where an unprotected Activity allows an attacker to change the list of locked apps without authentication. Affected component: AppLock on Samsung Android devices (unprotected activity in AppLock). Root caus...

CVE-2022-27822

CVE-2022-27822 describes an information-disclosure vulnerability in Samsung SMR (system patch package). Prior to SMR Apr-2022 Release 1, the ril property setting could expose EF_RUIMID without permission. Documented across multiple feeds (NVD entries and security notices) with affected product sc...

CVE-2022-27829

CVE-2022-27829 is described across multiple connected sources as an improper validation vulnerability in Samsung SMR’s VerifyCredentialResponse prior to SMR Apr-2022 Release 1. The issue enables attackers to launch certain activities, with affected entities typically within the device’s local tru...

CVE-2022-42506

CVE-2022-42506 affects Android kernel components. The issue is in SimUpdatePbEntry::encode (simdata.cpp) where a missing bounds check can cause an out-of-bounds write, enabling local escalation of privilege with System execution privileges needed. Exploitation is described as local and requires n...

CVE-2022-42518

CVE-2022-42518 affects the Android kernel (rild_exynos) via an out-of-bounds write in BroadcastSmsConfigsRequestData::encode (smsdata.cpp) caused by a missing bounds check. This can enable local escalation of privilege with System execution privileges; no user interaction is required. Public deta...

CVE-2023-20949

CVE-2023-20949 affects the Android kernel: in s2mpg11_pmic_probe() of s2mpg11-regulator.c there is a heap buffer overflow that can cause an out-of-bounds read, enabling local information disclosure without additional privileges. Exploitation is described as local (AV:L, AC:L, PR:L, UI:N, S:U) wit...

CVE-2023-21029

CVE-2023-21029 affects Android 13 via a missing permission check in UidObserverController.java register, enabling local information disclosure of app usage without user interaction. Root cause: inadequate access control in the registration flow. Impact: information disclosure with user privileges...

CVE-2023-21149

CVE-2023-21149 affects the ShannonRcsService.java in Android kernel, where registerGsmaServiceIntentReceiver lacks a required permission check. This enables possible activation/deactivation of the RCS service via local escalation of privilege, without additional execution privileges or user inter...

CVE-2023-21179

CVE-2023-21179 affects Android 13 and involves XmlUtil.java’s parseSecurityParamsFromXml. The root issue is a weakness in how crypto is used, allowing bypass of a user-specified wifi encryption protocol, enabling local privilege escalation with no additional execution privileges or user interacti...

CVE-2023-21194

The CVE-2023-21194 entry concerns Android 13 Bluetooth stack (gatt_utils.cc: gatt_dbg_op_name). A missing bounds check allows an out-of-bounds read, enabling local information disclosure via the Bluetooth server. Exploitation requires System privileges; no user interaction is needed. Public detai...

CVE-2023-35654

CVE-2023-35654 concerns the stmvl53l1_module.c ctrl_roi function, where an incorrect bounds check may cause an out-of-bounds read. This could enable local escalation of privilege with system execution privileges required. Exploitation is described as local (no user interaction required). Connecte...

CVE-2023-48343

CVE-2023-48343 affects Unisoc Android devices with a vulnerability in the video decoder. The issue is an out-of-bounds write caused by improper input validation, leading to local denial of service without requiring additional privileges. Public details consistently describe this failure mode and ...

CVE-2023-48344

CVE-2023-48344 is described across multiple sources as a local out-of-bounds read in the video decoder due to improper input validation, leading to local denial of service without requiring extra privileges. Public details are provided in the Android Jan 2024 security bulletin (listed under Uniso...

CVE-2024-32925

CVE-2024-32925 affects the dhd_prot_txstatus_process function in dhd_msgbuf.c. The issue is described as a possible out-of-bounds write caused by a missing bounds check, which could enable remote code execution. The description states no additional execution privileges are required, and exploitat...

CVE-2024-47022

CVE-2024-47022 affects Google Pixel devices running Android prior to the 2024-10-05 patch level, with the ACPM component (A-331255656) identified as the vulnerable element. The Red Hat and CNVD entries corroborate the same information disclosure issue, described as an information leak stemming fr...

CVE-2024-47038

CVE-2024-47038 describes an out-of-bounds write in the function dhd_prot_flowrings_pool_release within dhd_msgbuf.c, caused by a missing bounds check. This can lead to local privilege escalation with no user interaction required. Documents collectively indicate a Linux/Android kernel context (Pix...

CVE-2025-20662

CVE-2025-20662 concerns PlayReady TA, where a missing bounds check enables a potential out-of-bounds read that could cause local escalation of privilege if the attacker already has System privileges. Exploitation reportedly does not require user interaction. The CVSS 3.1 vector (LOCAL, HIGH privi...

CVE-2013-7372

CVE-2013-7372 affects the SecureRandom implementation in Apache Harmony (SHA1PRNG_SecureRandomImpl) used by JCA in Android up to version 4.3/4.4 boundaries. The engineNextBytes function uses an incorrect offset when no user seed is provided, making the PRNG output more predictable and enabling at...

CVE-2015-3832

CVE-2015-3832: Affects Android devices with vulnerable libstagefright code (MPEG4Extractor.cpp) prior to 5.1.1 LMY48I. Multiple buffer overflows allow remote attackers to execute arbitrary code via invalid NAL unit size values in MP4 data; the vulnerability is tied to the MP4/Stagefright processi...

CVE-2015-6602

CVE-2015-6602 concerns libutils in Android up to version 5.1.1 LMY48M. A crafted metadata payload in MP3/MP4 files can trigger memory corruption and remote code execution via the mediaserver pathway (through libstagefright). The issue is categorized as a Remote Code Execution vulnerability and is...

CVE-2018-9463

The vulnerability CVE-2018-9463 affects the touchscreen path in the Android kernel: In sw49408_irq_runtime_engine_debug (touch_sw49408.c), there is an out-of-bounds write caused by an incorrect bounds check. This can enable local privilege escalation with System execution privileges required and ...

CVE-2019-2015

CVE-2019-2015 affects Android devices and centers on rw_t3t_act_handle_check_rsp in rw_t3t.cc, where a missing bounds check can cause an out-of-bounds write. This leads to local elevation of privilege with no additional execution privileges needed; user interaction is required to exploit. Affecte...

CVE-2019-2021

CVE-2019-2021 describes an information-disclosure flaw in the Android rw_t3t.cc component: in rw_t3t_act_handle_ndef_detect_rsp there is a missing bounds check that allows an out-of-bounds read. This could enable local information disclosure with no execution privileges required, and exploitation...

CVE-2019-9365

CVE-2019-9365 corresponds to a Bluetooth deserialization bug in Android 10 that can enable remote code execution with network access and no user interaction. Affected component is Bluetooth deserialization in Android 10; root cause is missing string validation during deserialization, leading to R...

CVE-2020-0055

Summary (CVE-2020-0055) : Affected software is Android 10. The issue is in the function l2c_link_process_num_completed_pkts of l2c_link.cc , where a missing bounds check allows a possible out-of-bounds read. This can lead to local information disclosure without additional execution privileges; us...

CVE-2020-0430

CVE-2020-0430 affects the Linux kernel skb_headlen in /include/linux/skbuff.h, causing a possible out-of-bounds read due to memory corruption and enabling local privilege escalation without user interaction. Affected product context in provided docs is Android kernel/Unity Linux kernel. Exploitat...

CVE-2021-0874

CVE-2021-0874 concerns the PowerVR GPU driver component PVRSRVBridgeDevicememHistorySparseChange, where a missing size check can trigger an integer overflow that allows out-of-bounds heap access. The impact stated across sources is local escalation of privileges with no additional execution privi...

CVE-2021-1004

CVE-2021-1004 affects Android 12, via a missing permission check in getConfiguredNetworks() of WifiServiceImpl.java that can allow an app to determine whether another app is installed without query permissions. This is a local privilege escalation (no user interaction required) per the descriptio...

CVE-2021-1010

CVE-2021-1010: In Android 12, the Android framework component PackageManagerService.getSigningKeySet is missing a permission check, enabling local information disclosure without elevation or user interaction. The CVSS 3.1 base score is 5.5 (MEDIUM), with local attack vector and HIGH confidentiali...

CVE-2021-39740

CVE-2021-39740 affects the Android 12L messaging path. The issue arises from improper input validation in messaging, allowing an attacker to bypass attachment restrictions and cause local information disclosure without requiring user interaction or privileges. The vulnerability is categorized und...

CVE-2021-39788

CVE-2021-39788 affects Android 12L TelecomManager. The issue enables a side-channel information disclosure that allows checking whether a specific self-managed phone account is registered on the device, leading to local information disclosure without additional privileges and without user interac...

CVE-2022-20030

CVE-2022-20030 affects the vow driver; vulnerability is an out-of-bounds write caused by a stack-based buffer overflow. This can allow local escalation of privileges to System with no user interaction required. The advisory notes a patch identified as ALPS05837793 (Issue ALPS05837793) for remedia...

CVE-2022-20046

The CVE-2022-20046 entry describes a Bluetooth memory corruption due to a logic error that could cause local denial of service without user interaction. The vulnerability is associated with a patch identified as ALPS06142410 (Issue ALPS06142410). Public exploitation details, affected product name...

CVE-2022-20067

CVE-2022-20067 affects mdp with an out-of-bounds write caused by a missing bounds check, enabling local escalation to SYSTEM privileges without user interaction. Exploitation details are not provided in the documents, but multiple sources confirm the issue and reference patch ALPS05836585 (Issue ...

CVE-2022-20069

CVE-2022-20069 affects the preloader (usb) and involves an out-of-bounds write caused by an integer overflow. The documented impact is local privilege escalation for an attacker with physical access to the device, with user interaction required for exploitation. Affected details specify a patch i...

CVE-2022-20079

The CVE-2022-20079 entry concerns the vow component. Root cause: improper input validation enables a read of uninitialized data, causing local information disclosure with system execution privileges required; user interaction is not required. A patch is listed (ALPS05837742; ALPS05857289). Connec...