CVE-2022-20286

CVE-2022-20286 affects Android 13 under the Connectivity component. A logic error can bypass the restriction on starting activities from the background, potentially enabling local privilege escalation with user privileges and no user interaction required. Documented impact: local elevation of pri...

CVE-2022-20364

CVE-2022-20364 affects the Android kernel’s sysmmu_unmap function. The root cause is a missing bounds check that can cause an out-of-bounds write, enabling local privilege escalation with no additional execution privileges or user interaction required. The vulnerability is categorized as a Kernel...

CVE-2022-20518

The CVE-2022-20518 entry concerns a SQL injection in the MmsSmsProvider.java query that can lead to local information disclosure on Android 13 (Pixel). Affected component: MmsSmsProvider.java (Android framework for messaging); root cause: improper handling of SQL queries enabling access to restri...

CVE-2022-20529

CVE-2022-20529 affects Android 13, specifically the WifiDialogActivity.java code, where a logic error can cause a limited lockscreen bypass and local escalation of privilege in wifi settings without user interaction. The CVE severity per the initial data is Low (CVSS v3.1: 2.4). No exploitation d...

CVE-2022-20547

The CVE-2022-20547 entry concerns Android 13 where multiple functions in AdapterService.java can manipulate Bluetooth state due to a missing permission check, enabling local privilege escalation with no extra execution privileges and no user interaction required. The available sources (NVD/Red Ha...

CVE-2022-20577

CVE-2022-20577 affects the Android kernel component involved in the OemSimAuthRequest::encode function in wlandata.cpp, where a missing bounds check allows an out‑of‑bounds write. This can lead to local escalation of privilege with System privileges required; exploitation reportedly does not requ...

CVE-2022-20589

CVE-2022-20589 affects the Android kernel, specifically a vulnerability in the function valid_va_secbuf_check within drm_access_control.c. The issue arises from improper input validation, enabling local information disclosure and requiring System execution privileges for exploitation, with no use...

CVE-2022-20608

CVE-2022-20608 – Pixel cellular firmware : A local information-disclosure flaw caused by an out-of-bounds read from an incorrect bounds check in Pixel cellular firmware (Android kernel). Exploitation requires local access; no user interaction is needed. Impact is information disclosure with high ...

CVE-2022-21766

CVE-2022-21766 affects MediaTek CCCI (core inter-processor communication) with an out-of-bounds write caused by a missing bounds check. This vulnerability can enable local escalation of privileges to SYSTEM level without user interaction. Exploitation status is not described in the provided docum...

CVE-2022-26469

CVE-2022-26469 affects MediaTek’s MtkEmail module and describes a local privilege-escalation vulnerability caused by fragment injection. The issue permits escalation without requiring execution privileges and with no user interaction, aligning with a high impact (confidentiality, integrity, and a...

CVE-2022-27830

CVE-2022-27830 describes an improper validation vulnerability in the SemBlurInfo component prior to Samsung SMR Apr-2022 Release 1, enabling attackers with local access to launch certain activities. The NVD entry lists a High risk (CVSS v3.1: 7.8) with LOCAL access, LOW attack complexity, and no ...

CVE-2022-33717

The CVE-2022-33717 issue affects Samsung SEM TA Module before SMR Aug-2022 Release 1, where missing input validation before memory reads allows a local attacker to read out-of-bounds memory. Affected component: SEM TA memory-read path within the ROM/TA environment (Sem Ta). Impact is confidential...

CVE-2022-42509

CVE-2022-42509 affects the Android kernel component in the function CallDialReqData::encode (callreqdata.cpp). The issue is described as an out-of-bounds write caused by a missing bounds check, which could enable a local escalation of privilege with System execution privileges required. Exploitat...

CVE-2022-42525

CVE-2022-42525 affects Android’s ril_service_1_6.cpp in the Android kernel stack, where an incorrect bounds check can cause an out-of-bounds write. The documented impact is local escalation of privilege with System execution privileges required, and exploitation is listed as requiring no user int...

CVE-2022-47347

CVE-2022-47347 affects engineermode services where a missing permission check enables local denial of service. Primary sources (NVD/Red Hat/CVE listings and related mirrors) describe a local access/privilege issue in engineermode services without detailing exploit vectors or affected product vers...

CVE-2022-47359

CVE-2022-47359 concerns the Log Service, where a missing permission check is identified as the root cause. The exposure enables local denial of service in the log service. The available connected records consistently describe a privilege check omission as the flaw, but do not provide product/vend...

CVE-2023-20980

CVE-2023-20980 affects Android 13 Bluetooth stack (btu_ble_ll_conn_param_upd_evt in btu_hcif.cc). The issue is an out-of-bounds read due to a missing bounds check, leading to local information disclosure with System execution privileges required; no user interaction is needed. Public documentatio...

CVE-2023-21019

CVE-2023-21019 affects Android 13 components, specifically a heap buffer overflow in ih264e_init_proc_ctxt within ih264e_process.c that can cause an out-of-bounds read and local information disclosure without requiring user interaction or elevated privileges. The vulnerability is documented with ...

CVE-2023-21020

The CVE-2023-21020 vulnerability affects Android 13 (Pixel devices) and is described as a use-after-free in registerSignalHandlers of main.c that can lead to local arbitrary code execution with SYSTEM privileges, requiring no user interaction. The issue enables local escalation of privileges via ...

CVE-2023-21055

In CVE-2023-21055, a use-after-free due to a race condition exists in the dit_hal_ioctl function of dit.c in the Android kernel. This vulnerability can enable local escalation of privilege with SYSTEM privileges needed, and does not require user interaction. Affected component is the Android kern...

CVE-2023-21060

CVE-2023-21060 affects the Android kernel, specifically in sms_GetTpPiIe within sms_PduCodec.c. The issue is an out-of-bounds read caused by a missing bounds check, enabling potential remote information disclosure with no extra execution privileges and no user interaction. Documented impact is in...

CVE-2023-21063

CVE-2023-21063 affects Android kernel components (ParseWithAuthType in simdata.cpp) and is described as an out-of-bounds read that can enable local privilege escalation with SYSTEM-level privileges required. Multiple connected sources confirm the issue and its Android/Pixel context, including Pix...

CVE-2023-21209

CVE-2023-21209 affects Android’s sta_iface.cpp with an out-of-bounds read caused by unsafe deserialization, enabling local privilege escalation to System. The issue is associated with Android-13 and was discussed in Pixel/Android security bulletins; remediation is to update to Android-13 or newer...

CVE-2023-21377

CVE-2023-21377 : Concrete information shows a local information disclosure via a restriction bypass in the Android SELinux Policy. The issue is triggered by a permissions bypass within the policy, allowing disclosure without extra execution privileges and without user interaction. Exploitation st...

CVE-2023-32847

CVE-2023-32847 is a MediaTek audio module vulnerability described as an out-of-bounds write caused by a missing bounds check. It could enable local escalation of privilege and requires user interaction to exploit. A fix is identified as Patch ID ALPS08241940 (Issue ID ALPS08241940). The connected...

CVE-2023-35647

CVE-2023-35647 concerns Google Pixel baseband software: a missing bounds check in ProtocolEmbmsGlobalCellIdAdapter::Init() (protocolembmsadapter.cpp) allows an out-of-bounds read, leading to remote information disclosure and potential baseband firmware compromise. Exploitation requires no user in...

CVE-2023-48406

CVE-2023-48406 affects Google Pixel devices, specifically the Modem OTP component used in Pixel firmware. The public descriptions describe a logic error that can cause a permanent DoS or allow the modem to boot with unverified firmware. This could lead to local escalation of privilege, requiring ...

CVE-2023-48414

CVE-2023-48414 affects the Pixel Camera Driver. It describes a use-after-free due to a logic error, enabling local escalation of privilege with System privileges required and no user interaction. The vulnerability is categorized as EoP with a moderate impact in Pixel security bulletins, and no pu...

CVE-2024-20128

MediaTek Chipsets are vulnerable to an out-of-bounds read vulnerability in the Telephony component due to a missing bounds check. This flaw could allow an unauthenticated remote attacker to cause a denial of service without requiring additional privileges or user interaction. Remediation is avail...

CVE-2024-31337

CVE-2024-31337 affects PVRSRVRGXKickTA3DKM in rgxta3d.c. The vulnerability arises from improper input validation, enabling arbitrary code execution and local kernel privilege escalation with no extra privileges or user interaction required. The issue is discussed across multiple catalogs (NVD/And...

CVE-2024-32895

A missing bounds check in BCMFASTPATH of dhd_msgbuf.c within a Broadcom component leads to a possible out-of-bounds write . This vulnerability can be leveraged for local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue specifically imp...

CVE-2024-53835

A security vulnerability in Google Android allows for a biometric bypass due to an anomalous root cause. This flaw can be exploited to achieve local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue specifically affects the FPS subcompo...

CVE-2024-53836

Google Android devices are vulnerable to an out-of-bounds write due to a buffer overflow in the wbrc_bt_dev_write function of the wb_regon_coordinator.c file. This vulnerability stems from a lack of bounds checking and can lead to local escalation of privilege (EoP). Exploitation requires System ...

CVE-2012-4221

CVE-2012-4221 involves an integer overflow in the Qualcomm Innovation Center (QuIC) Diagnostics (DIAG) kernel-mode driver for Android 2.3–4.2, specifically in diagchar_core.c. An attacker could exploit crafted arguments via a local diagchar_ioctl call to achieve arbitrary code execution or cause ...

CVE-2015-3099

CVE-2015-3099 concerns Adobe Flash Player and related Adobe AIR components. Affected versions include Flash Player 13.0.0.292 and 14.x up to 18.x before 18.0.0.160 on Windows/macOS, and before 11.2.202.466 on Linux; Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X/Android; and...

CVE-2015-3102

Adobe Flash Player and related runtimes (Windows/macOS: 13.0.0.292 and 14.x–18.x before 18.0.0.160; Linux before 11.2.202.466; AIR before 18.0.0.144 on Windows and before 18.0.0.143 on macOS/Android; AIR SDKs before 18.0.0.144/18.0.0.143) are affected by CVE-2015-3102, which enables remote bypass...

CVE-2015-6678

CVE-2015-6676 affects Adobe Flash Player and AIR components. The vulnerability is a buffer overflow in Flash Player before 18.0.0.241 and in the 19.x line before 19.0.0.185 (Windows/OS X) and before 11.2.202.521 on Linux, plus Adobe AIR before 19.0.0.190 and AIR SDK/Compiler before 19.0.0.190. Th...

CVE-2017-0714

CVE-2017-0714 is a remote code execution vulnerability in Android’s media framework h263 decoder . Affected products/versions: Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause: vulnerability exists in decoding of H.263 files/streams, enabling arbitrary code execution. Docume...

CVE-2018-9465

Summary : CVE-2018-9465 affects the Android kernel, specifically the binder.c task_get_unused_fd_flags path, where a use-after-free can cause memory corruption. This could enable local privilege escalation with no extra privileges required and without user interaction. Multiple connected advisori...

CVE-2020-0046

CVE-2020-0046 affects Android 10 Media Framework (DrmPlugin.cpp). It describes a heap-buffer overflow in DrmPlugin::releaseSecureStops causing an out-of-bounds write, enabling local privilege escalation without user interaction. Public details in the Pixel bulletin indicate patch level 2020-03-05...

CVE-2020-13840

CVE-2020-13840 affects LG mobile devices running Android 7.2–10 on MTK chipsets. The issue is a buffer overflow in the MTK AT command handler, enabling potential code execution. The LG internal identifier is LVE-SMP-200008 (June 2020). Documents do not provide the exact affected models, firmware ...

CVE-2021-0874

CVE-2021-0874 concerns the PowerVR GPU driver component PVRSRVBridgeDevicememHistorySparseChange, where a missing size check can trigger an integer overflow that allows out-of-bounds heap access. The impact stated across sources is local escalation of privileges with no additional execution privi...

CVE-2021-39744

CVE-2021-39744 affects Android 12L and is described in Android 12L security release notes. The vulnerability arises in the DevicePolicyManager, enabling a side-channel that can determine whether an app is installed without query permissions, leading to local information disclosure without additio...

CVE-2021-39769

CVE-2021-39769 concerns an information-disclosure vulnerability in Android 12L’s Device Policy component where there is a missing permission check that allows an app to determine whether another app is installed without query permissions. The issue enables local information disclosure without ext...

CVE-2021-39783

CVE-2021-39783 is an Elevation of Privilege vulnerability in Android’s rcsservice on Android 12L. The issue arises from a missing permission check, enabling local privilege escalation with no additional execution privileges or user interaction required. Affected component: rcsservice; impact is l...

CVE-2021-39786

CVE-2021-39786 affects Android 12L NFC component and is characterized by an out-of-bounds write due to a missing bounds check, enabling local privilege escalation to SYSTEM with no user interaction. Affected: Android 12L devices; trigger by NFC handling (component/file not deeply detailed in the ...

CVE-2022-20066

CVE-2022-20066 affects the atf (hwfde) component. The issue is described as an incorrect error handling path that can cause a local information disclosure leak, with privileges required to execute (System) and no user interaction needed for exploitation. The vulnerability is associated with Media...

CVE-2022-20076

CVE-2022-20076 affects the ged component, with root cause described as memory corruption due to incorrect error handling. The impact is local information disclosure and potential system-level execution privileges, with exploitation not requiring user interaction. A patch is identified (ALPS058388...

CVE-2022-20178

CVE-2022-20178 affects Android kernel components where ioctl_dpm_qos_update and ioctl_event_control_set can trigger an out-of-bounds write caused by an integer overflow. This can lead to local privilege escalation with system execution privileges required, and exploitation does not require user i...

CVE-2022-20382

CVE-2022-20382 affects the Android kernel (kernel components). The description cites a possible out-of-bounds write due to a kernel stack overflow, enabling local escalation of privilege with System privileges required and no user interaction needed. Several connected sources (NVD, Red Hat, SUSE,...