CVE-2022-20074

CVE-2022-20074 concerns a boundary-check omission in the preloader (partition) of MediaTek devices, causing an out-of-bounds write that can enable local privilege escalation with physical access and user interaction required for exploitation. Affected component: preloader partition code on MediaT...

CVE-2022-20095

The CVE-2022-20095 issue affects MediaTek’s imgsensor, where a missing bounds check allows an out-of-bounds write in the sensor driver. The vulnerability can lead to local privilege escalation with system execution rights and does not require user interaction. A patch is identified (ALPS06479763)...

CVE-2022-20159

CVE-2022-20159 affects the Android kernel via the asn1_ec_pkey_parse function in acropora/crypto/asn1_common.c. The issue is an out-of-bounds read caused by an incorrect bounds check, which can lead to local information disclosure with system privileges (no user interaction required). Exploitatio...

CVE-2022-20194

CVE-2022-20194 affects Android 12L. The vulnerability arises in the onCreate of ChooseLockGeneric.java, enabling a local elevation of privilege through a permission bypass that does not require user interaction. The impact is limited to elevation of privileges on the device. Remediation per the P...

CVE-2022-20372

The Android kernel is vulnerable to an out of bounds write caused by a use after free in the exynos5_i2c_irq function. This flaw could lead to local escalation of privilege (EoP) and requires System execution privileges for exploitation. No user interaction is required. This vulnerability affects...

CVE-2022-20527

CVE-2022-20527 affects Android 13 and is due to an out-of-bounds read in HalCoreCallback (halcore.cc) from NFC firmware caused by a missing bounds check. The issue enables local information disclosure with no additional execution privileges and no user interaction required (ATT&CK: Local, Privile...

CVE-2022-20595

In CVE-2022-20595, the issue is in the Android kernel’s WirelessCharger.cpp getWpcAuthChallengeResponse function. It describes an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with System privileges required. Public references confirm the affected comp...

CVE-2022-20609

CVE-2022-20609 involves a local information-disclosure vulnerability in Pixel cellular firmware due to a missing bounds check that allows an out-of-bounds read. Exploitation requires local access; no user interaction is needed. The issue is described for the Pixel/Android kernel domain, but the p...

CVE-2022-27829

CVE-2022-27829 is described across multiple connected sources as an improper validation vulnerability in Samsung SMR’s VerifyCredentialResponse prior to SMR Apr-2022 Release 1. The issue enables attackers to launch certain activities, with affected entities typically within the device’s local tru...

CVE-2022-30726

CVE-2022-30726 corresponds to an unprotected DeviceSearchTrampoline component in Samsung SecSettingsIntelligence, enabling local attackers to launch SecSettingsIntelligence activities. Affected: Samsung Mobile/SecSettingsIntelligence (DeviceSearchTrampoline). Root cause: unprotected component exp...

CVE-2022-33703

CVE-2022-33703 refers to an improper validation vulnerability in Samsung CACertificateInfo before the SMR July-2022 Release 1, enabling an elevation of privilege by exploiting faulty authentication logic. Public sources consistently describe the impact as attackers being able to "launch certain a...

CVE-2022-39105

CVE-2022-39105 affects Unisoc Unisoc kernel sensor driver; the root cause is a missing bounds check that can cause an out-of-bounds write, leading to local denial of service. Public references in NVD and multiple security trackers confirm the issue, with consistent description across sources. No ...

CVE-2022-42506

CVE-2022-42506 affects Android kernel components. The issue is in SimUpdatePbEntry::encode (simdata.cpp) where a missing bounds check can cause an out-of-bounds write, enabling local escalation of privilege with System execution privileges needed. Exploitation is described as local and requires n...

CVE-2022-42512

CVE-2022-42512 affects the Android kernel component in VsimOperationDataExt::encode (vsimdata.cpp). The issue is an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with System privileges; no user interaction needed. Connected sources confirm the vulnerab...

CVE-2022-42518

CVE-2022-42518 affects the Android kernel (rild_exynos) via an out-of-bounds write in BroadcastSmsConfigsRequestData::encode (smsdata.cpp) caused by a missing bounds check. This can enable local escalation of privilege with System execution privileges; no user interaction is required. Public deta...

CVE-2022-48458

In TeleService , CVE-2022-48458 describes a vulnerability where improper input validation can crash the system, leading to local denial of service with no additional privileges required. Affected component: TeleService (local exploitability). CVSS v3.1 base score is 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C...

CVE-2023-20838

CVE-2023-20838 concerns the imgsys component. Multiple connected sources confirm a race-condition–driven out-of-bounds read that can leak local information and, in some scenarios, enable system-level execution with user interaction required for exploitation. Affected references consistently descr...

CVE-2023-21026

CVE-2023-21026 affects Android 13 on the WindowManagerService component, specifically the updateInputChannel path in WindowManagerService.java. A logic error could allow an attacker to extend a touchable region beyond the owner SurfaceControl, enabling a local denial-of-service condition without ...

CVE-2023-21149

CVE-2023-21149 affects the ShannonRcsService.java in Android kernel, where registerGsmaServiceIntentReceiver lacks a required permission check. This enables possible activation/deactivation of the RCS service via local escalation of privilege, without additional execution privileges or user inter...

CVE-2023-21150

CVE-2023-21150 affects the Android kernel, specifically the function handle_set_parameters_ctrl in hal_socket.c. The vulnerability is an out-of-bounds read caused by an incorrect bounds check, leading to potential local information disclosure with System privileges required. No exploitation detai...

CVE-2023-21156

CVE-2023-21156 describes an out-of-bounds read in Android’s modem stack, specifically in BuildGetRadioNode within protocolmiscbulider.cpp, caused by improper input validation. The issue could allow local information disclosure from the modem and requires System execution privileges; exploitation ...

CVE-2023-21225

CVE-2023-21225 affects the Android kernel (Pixel context) and describes a vulnerability where failure to lock display power allows bypassing the protected confirmation screen, enabling local privilege escalation with no additional execution privileges required. Exploitation requires user interact...

CVE-2023-32809

CVE-2023-32809 : Affects the Bluetooth driver in MediaTek devices. The issue is improper access control of the register interface, enabling possible read/write access to registers. This can lead to local leakage of sensitive information with system-level privileges required for exploitation, and ...

CVE-2023-48343

CVE-2023-48343 affects Unisoc Android devices with a vulnerability in the video decoder. The issue is an out-of-bounds write caused by improper input validation, leading to local denial of service without requiring additional privileges. Public details consistently describe this failure mode and ...

CVE-2023-48344

CVE-2023-48344 is described across multiple sources as a local out-of-bounds read in the video decoder due to improper input validation, leading to local denial of service without requiring extra privileges. Public details are provided in the Android Jan 2024 security bulletin (listed under Uniso...

CVE-2023-48351

CVE-2023-48351 affects Unisoc Android video decoder; root cause is a missing bounds check causing an out-of-bounds write, leading to local denial of service. Public exploit details are not provided in the supplied documents. Remediation inferred from the Android bulletin: apply security patch lev...

CVE-2023-48407

CVE-2023-48407 affects Google Pixel bootloader: a logic error may prevent the DCK from being deleted after factory reset, enabling local elevation of privilege with no user interaction. Exploitation details are not provided in the documents; the Pixel update bulletin lists CVE-2023-48407 as a boo...

CVE-2023-48420

The CVE-2023-48420 entry describes a race-condition–driven use-after-free in the Camera component on Pixel devices, enabling local escalation of privilege with System-level privileges and no user interaction. The vulnerability is categorized as EoP (Camera) in the Pixel security bulletin, with a ...

CVE-2024-20001

The CVE-2024-20001 issue affects TVAPI and is caused by a missing bounds check leading to an out-of-bounds write, enabling local escalation of privilege with System privileges required; no user interaction is needed. Multiple connected sources (NVD, Red Hat, CVE lists) confirm the same descriptio...

CVE-2024-29750

A security vulnerability exists in Google Pixel devices within the GSC subcomponent. The issue is caused by a missing bounds check in the km_exp_did_inner function of the kmv.c file, which can lead to an out-of-bounds read . This flaw could result in local information disclosure without requiring...

CVE-2024-32904

CVE-2024-32904 concerns the ProtocolVsimOperationAdapter() function in protocolvsimadapter.cpp, where a missing bounds check can cause an out-of-bounds read. This may lead to local information disclosure with the requirement of baseband firmware compromise for exploitation, and no user interactio...

CVE-2019-2015

CVE-2019-2015 affects Android devices and centers on rw_t3t_act_handle_check_rsp in rw_t3t.cc, where a missing bounds check can cause an out-of-bounds write. This leads to local elevation of privilege with no additional execution privileges needed; user interaction is required to exploit. Affecte...

CVE-2020-13842

Technical details (affected product/versions/root cause/patch) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-0524

CVE-2021-0524 affects Android 12, related to CarPackageManagerService.java isServiceDistractionOptimized. The issue is a side-channel information disclosure that could allow a local disclosure of installed packages without additional execution privileges. Impact is local information disclosure wi...

CVE-2021-0681

CVE-2021-0681 is a vulnerability in Android where a missing permission check in system properties could allow local information disclosure without extra execution privileges and without user interaction. Affected components include MediaTek system properties on Android devices. The issue is docum...

CVE-2021-39740

CVE-2021-39740 affects the Android 12L messaging path. The issue arises from improper input validation in messaging, allowing an attacker to bypass attachment restrictions and cause local information disclosure without requiring user interaction or privileges. The vulnerability is categorized und...

CVE-2021-39747

CVE-2021-39747 affects Android 12L: a permissions bypass in Settings Provider may allow an attacker to list values of non-readable global settings, causing local information disclosure with no extra privileges and no user interaction. It is listed in Android 12L security release notes as addresse...

CVE-2022-20091

CVE-2022-20091 describes a use-after-free due to a race condition in the MediaTek aee driver, enabling local escalation of privilege to SYSTEM with no user interaction required. The issue is documented with patch ALPS06209201 and issue ALPS06226345. Connected sources confirm this is a real, drive...

CVE-2022-20165

CVE-2022-20165 affects the Android kernel component asn1_parse in asn1.c, where an incorrect bounds check can cause an out-of-bounds read. The consequence is local information disclosure with system execution privileges potentially required. The CVE is described as requiring no user interaction a...

CVE-2022-20177

CVE-2022-20177 affects the Android kernel. The vulnerability is in the Android kernel component of Android OS (no vendor/product details beyond Android kernel provided). NVD CVSS scores indicate CVSS v2 base score 5.0 (MEDIUM) with network attack vector, minimal impact on confidentiality as Parti...

CVE-2022-20192

CVE-2022-20192 affects Android 12L and relates to grantEmbeddedWindowFocus in WindowManagerService, enabling a permissions bypass that could let an attacker change an input channel in the embedded hierarchy and escalate privileges locally without user interaction. The available documents describe...

CVE-2022-20251

The CVE-2022-20251 issue affects Android 13 and involves LocaleManager. It enables a local attacker to determine whether a given app is installed without query permissions via a side-channel information disclosure, leading to potential local information exposure with no extra execution privileges...

CVE-2022-20375

CVE-2022-20375 affects the Android kernel: in LteRrcNrProAsnDecode (LteRrcNr_Codec.c) there is a possible out-of-bounds read due to a missing bounds check, enabling remote denial of service without user interaction. The vulnerability is categorized in public resources as a DoS issue impacting the...

CVE-2022-20383

CVE-2022-20383 affects the Android kernel via AllocateInternalBuffers in g3aa_buffer_allocator.cc, where an integer overflow can cause an out-of-bounds write. This enables local privilege escalation with no extra user interaction required. Documents indicate the issue exists in the Android kernel...

CVE-2022-20401

CVE-2022-20401: In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c there is an out-of-bounds read due to a missing bounds check, causing potential remote information disclosure after authentication with no additional privileges required. Affected: Android kernel components; Exploit status not...

CVE-2022-20404

CVE-2022-20404 is listed in Pixel bulletin data as affecting Android devices via the Modem component (Type: Information disclosure; Severity: Moderate). The vulnerable entry maps to CVE-2022-20404 with Android kernel context in the initial doc, but Pixel security bulletin categorizes it under the...

CVE-2022-20519

CVE-2022-20519 affects Android 13 in the AddAppNetworksActivity.java onCreate path. The root cause is a missing permission check that could let a guest user configure WiFi networks, enabling local elevation of privilege. Exploitation requires local access; no extra user interaction is needed. No ...

CVE-2022-20521

CVE-2022-20521 concerns a Bluetooth DoS in Android 13 caused by a missing null check in sdpu_find_most_specific_service_uuid (sdp_utils.cc). The vulnerability can crash Bluetooth, leading to local denial of service with no additional privileges required; exploitation requires user interaction. Do...

CVE-2022-20588

CVE-2022-20588 affects the Android kernel in the sysmmu_map function of sysmmu.c. The issue is a precondition check failure that can enable local elevation of privilege, granting System execution privileges. Exploitation details are not provided in the supplied documents; no user interaction is r...

CVE-2022-24929

Summary: CVE-2022-24929 affects Samsung AppLock (Android) prior to SMR Mar-2022 Release 1, where an unprotected Activity allows an attacker to change the list of locked apps without authentication. Affected component: AppLock on Samsung Android devices (unprotected activity in AppLock). Root caus...