CVE-2022-20169

CVE-2022-20169 is associated with Android kernel/modem in Google Pixel devices as per the connected documents. The PRION source explicitly labels the issue as a "Code injection" vulnerability, while other documents broadly reference the Android kernel/modem context for this CVE. The exact root ca...

CVE-2022-20519

CVE-2022-20519 affects Android 13 in the AddAppNetworksActivity.java onCreate path. The root cause is a missing permission check that could let a guest user configure WiFi networks, enabling local elevation of privilege. Exploitation requires local access; no extra user interaction is needed. No ...

CVE-2022-20559

CVE-2022-20559 affects Android 13, describing a side-channel disclosure in revokeOwnPermissionsOnKill within PermissionManager.java that may allow an app to be detected as installed without query permissions. The issue results in local information disclosure with no additional execution privilege...

CVE-2022-20571

The CVE-2022-20571 entry documents a use-after-free in extract_metadata of dm-android-verity.c in the Android kernel, which can corrupt kernel memory. It implies local escalation of privilege to System with no user interaction required. Affected component is the kernel’s dm-verity subsystem; root...

CVE-2022-20576

This CVE-2022-20576 affects Android kernel telephony code, specifically the externalOnRequest function in rilapplication.cpp. The issue is a potential out-of-bounds write caused by a missing bounds check, which could enable local escalation of privilege with System execution privileges required. ...

CVE-2022-20599

CVE-2022-20599 affects Google Pixel firmware/kernel components. The vulnerability is described as an exposure of sensitive memory due to a missing bounds check in Pixel firmware, which can lead to local elevation of privilege with System execution privileges required. The impact is indicated as h...

CVE-2022-33703

CVE-2022-33703 refers to an improper validation vulnerability in Samsung CACertificateInfo before the SMR July-2022 Release 1, enabling an elevation of privilege by exploiting faulty authentication logic. Public sources consistently describe the impact as attackers being able to "launch certain a...

CVE-2022-42507

CVE-2022-42507 describes a potential out-of-bounds write in ProtocolSimBuilder::BuildSimUpdatePb3gEntry within the Android kernel, caused by a missing bounds check. The vulnerability could enable local escalation of privilege with System privileges required, and exploitation is stated as requirin...

CVE-2022-42509

CVE-2022-42509 affects the Android kernel component in the function CallDialReqData::encode (callreqdata.cpp). The issue is described as an out-of-bounds write caused by a missing bounds check, which could enable a local escalation of privilege with System execution privileges required. Exploitat...

CVE-2022-42510

CVE-2022-42510 involves the Android kernel component where the function is StringsRequestData::encode in requestdata.cpp. The root cause is an out-of-bounds read caused by improper input validation, which could enable a local escalation of privilege with System execution privileges required. Expl...

CVE-2022-42514

CVE-2022-42514 affects Android kernel code: ProtocolImsBuilder::BuildSetConfig in protocolimsbuilder.cpp is vulnerable to an out-of-bounds read due to a missing bounds check. This could allow local information disclosure with System-level privileges required. The vulnerability is documented acros...

CVE-2022-42521

CVE-2022-42521 affects the Android kernel component wlandata.cpp where the encode path can trigger an out-of-bounds write due to improper input validation. The exploitation requires local access (LOCAL) with high privileges (PR:H) and no user interaction. Impact is defined as full compromise of c...

CVE-2022-42532

CVE-2022-42532 affects Google/Pixel firmware and the Android kernel: an out-of-bounds read due to a missing bounds check could allow local information disclosure with system execution privileges, requiring no user interaction. The issue is documented across multiple sources (Pixel firmware discus...

CVE-2023-20828

The CVE-2023-20828 issue affects the gps component in MediaTek chips (GPS) with an out-of-bounds write caused by a missing bounds check. This can lead to local privilege escalation with SYSTEM rights and does not require user interaction. Affected details are supported by multiple sources (NVD/Re...

CVE-2023-20974

CVE-2023-20974 affects Android 13. The issue is in the function btm_ble_add_resolving_list_entry_complete in btm_ble_privacy.cc , where a missing bounds check can cause an out-of-bounds read. This may lead to local information disclosure and could enable system-level execution privileges, with no...

CVE-2023-20985

CVE-2023-20985 concerns an out-of-bounds write in BTA_GATTS_HandleValueIndication within bta_gatts_api.cc due to improper input validation. Affects Android 13; exploitation would enable local elevation of privilege with no user interaction required. The connected sources describe the vulnerabilit...

CVE-2023-21044

CVE-2023-21044 relates to the Android kernel and the initialization of VendorGraphicBufferMeta. The issue is an out-of-bounds read caused by a missing bounds check in init, enabling potential local information disclosure with System execution privileges required. Exploitation is described as loca...

CVE-2023-21168

CVE-2023-21168 affects Android 13 and specifically the ColorConverter.cpp function convertCbYCrY, where a missing bounds check may cause an out-of-bounds read and local information disclosure without requiring user interaction. Multiple sources (NVD entry, Red Hat advisory, PRION/OSV enrichment, ...

CVE-2023-21201

CVE-2023-21201 involves the Android Bluetooth SDP server: in on_create_record_event of btif_sdp_server.cc there is an out-of-bounds read due to a missing null check. This can lead to a remote denial of service without extra privileges and without user interaction. The issue is tied to Android-13 ...

CVE-2023-35660

Summary: CVE-2023-35660 describes a use-after-free in lwis_transaction_client_cleanup (lwis_transaction.c) that can corrupt memory and enable local privilege escalation with SYSTEM privileges; exploitation does not require user interaction. The vulnerability is reported across multiple feeds (NVD...

CVE-2023-35685

CVE-2023-35685 describes a logic error in DevmemIntMapPages within the file devicemem_server.c that can cause a physical page use-after-free. This USE-After-FREE condition could enable local privilege escalation in the kernel without requiring additional execution privileges or user interaction. ...

CVE-2023-48410

CVE-2023-48410 involves an out-of-bounds read in cd_ParseMsg of cd_codec.c due to a missing bounds check, enabling remote information disclosure without extra privileges or user interaction. The description is consistent across NVD, PRION, CVELIST, and CNNVD entries. Pixel/Android Bulletin refere...

CVE-2023-48414

CVE-2023-48414 affects the Pixel Camera Driver. It describes a use-after-free due to a logic error, enabling local escalation of privilege with System privileges required and no user interaction. The vulnerability is categorized as EoP with a moderate impact in Pixel security bulletins, and no pu...

CVE-2024-11624

CVE-2024-11624 affects Google Android (notably Pixel) and is categorized as an Elevation of Privilege (VPN) vulnerability. The issue arises from an undeclared permission that allows adding apps to bypass VPN, enabling local privilege elevation with no extra execution privileges and no user intera...

CVE-2024-20050

CVE-2024-20050 affects the flashc component in MediaTek-related platforms, with an uncaught exception leading to local information disclosure. Exploitation requires system execution privileges (local attack) and does not require user interaction. Patch ALPS08541757 (Issue ALPS08541757) is associa...

CVE-2024-20059

CVE-2024-20059 involves a local privilege escalation in the MediaTek stack due to an incorrect status check in the da module. The flaw can allow a non-privileged or high-privileged user to gain SYSTEM execution privileges without user interaction. Exploitation details are not provided in the conn...

CVE-2024-27232

CVE-2024-27232 describes an out-of-bounds read in asn1_ec_pkey_parse of asn1_common.c due to a missing null check, enabling local information disclosure without extra privileges and no user interaction. The connected Red Hat/OSV/NVD entries confirm the root cause and impact but do not specify aff...

CVE-2024-29756

CVE-2024-29756 describes an out-of-bounds write in the afe_callback function of q6afe.c due to a buffer overflow, enabling local escalation of privilege with no user interaction required. The connected sources consistently reiterate this condition; however, no concrete remediation version is spec...

CVE-2024-29785

CVE-2024-29785 describes an information disclosure in the Aurora driver code path: the function name and file are aur_get_state in aurora.c. The root cause is uninitialized data leading to local information disclosure without extra privileges or user interaction. Affected entity is evidenced by m...

CVE-2024-32908

CVE-2024-32908 concerns the Android media.c component: in the sec_media_protect function there is a race condition that can bypass permissions and enable local escalation of privileges. Exploitation is described as needing local access with no user interaction, but no exploit details are provided...

CVE-2012-4221

CVE-2012-4221 involves an integer overflow in the Qualcomm Innovation Center (QuIC) Diagnostics (DIAG) kernel-mode driver for Android 2.3–4.2, specifically in diagchar_core.c. An attacker could exploit crafted arguments via a local diagchar_ioctl call to achieve arbitrary code execution or cause ...

CVE-2015-3106

Adobe Flash Player contains a use-after-free vulnerability (CVE-2015-3106) that allows arbitrary code execution via unspecified vectors. Affected products include Flash Player before 13.0.0.292 and 14.x up to 18.x before 18.0.0.160 on Windows/macOS, and before 11.2.202.466 on Linux; Adobe AIR bef...

CVE-2015-6676

CVE-2015-6676 is a buffer overflow vulnerability in Adobe Flash Player and related AIR components. Affected: Flash Player on Windows/macOS prior to 18.0.0.241 and 19.x prior to 19.0.0.185, Linux prior to 11.2.202.521; AIR before 19.0.0.190 and AIR SDK/Compiler before 19.0.0.190. Description notes...

CVE-2018-9439

The issue CVE-2018-9439 affects the Linux kernel’s af_packet.c, specifically in __unregister_prot_hook and packet_release. The root cause is an improper locking leading to a use-after-free scenario in the network stack. Impact described across sources is local privilege escalation with kernel-lev...

CVE-2018-9497

CVE-2018-9497 affects Android’s media framework. Affected component: the IMPEG-2 decoder, specifically in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 within impeg2_format_conv.s, where a missing bounds check can cause an out-of-bounds write. This could lead to remote code execution with no additio...

CVE-2019-2012

CVE-2019-2012 (Android) affects Android 7.0–9 where a function rw_t3t_act_handle_fmt_rsp in rw_t3t.cc can write out of bounds due to a missing bounds check. This is a local elevation-of-privilege flaw that could be triggered with user interaction and, if exploited, would occur within a privileged...

CVE-2020-0046

CVE-2020-0046 affects Android 10 Media Framework (DrmPlugin.cpp). It describes a heap-buffer overflow in DrmPlugin::releaseSecureStops causing an out-of-bounds write, enabling local privilege escalation without user interaction. Public details in the Pixel bulletin indicate patch level 2020-03-05...

CVE-2020-0052

CVE-2020-0052 affects Android 10 where In smsSelected of AnswerFragment.java an elevation-of-privilege vulnerability exists due to a permissions bypass that allows sending an SMS from the lock screen. The issue enables local privilege escalation with no extra execution privileges required; exploi...

CVE-2020-0062

CVE-2020-0062 affects Android Euicc. An information disclosure exists due to an included test certificate, enabling remote data exposure without extra privileges. Exploitation is network-based with no user interaction required. CVSSv2/3.1 base scores are 5.0 (MEDIUM) and 7.5 (HIGH) respectively. ...

CVE-2020-28343

CVE-2020-28343 concerns Samsung Exynos NPU kernel driver vulnerabilities disclosed by Project Zero. The issue centers on unsanitized input in the NPU session parsing for /dev/vertex10, leading to two concrete primitives: (1) a heap overflow via a race on shared ION buffer memory_vector_cnt, allow...

CVE-2021-0583

CVE-2021-0583 affects Android (9/10) and relates to the BluetoothPairingDialog onCreate, enabling a tapjacking/overlay scenario that could lead to local elevation of privilege. According to Red Hat and NVD entries, exploitation requires user interaction (UI: Required) and local access, with a hig...

CVE-2021-1033

CVE-2021-1033 affects Android 12L and involves a local elevation-of-privilege in ConnectedDevicesSliceProvider.java.java (createGeneralSlice) due to an unsafe PendingIntent. Impact: local Privilege Escalation with HIGH/Partial/Partial likelihoods in CVSS3.1 terms, with no user interaction require...

CVE-2021-39682

CVE-2021-39682 affects the Android kernel component memory_group_manager.c (function mgm_alloc_page). A bounds check is incorrect, enabling a potential out-of-bounds write that could lead to local privilege escalation without extra execution privileges or user interaction. Exploitation details ar...

CVE-2021-39739

CVE-2021-39739 affects Android 12L and is a vulnerability in the ArrayMap component where SMS contents could be leaked via log information disclosure. The root cause is information disclosure in ArrayMap that enables a local information leak with neither user interaction nor remote access require...

CVE-2021-39743

CVE-2021-39743 affects Google Android 12L in the PackageManager component, where a missing permission check allows updating another package’s last-used time and enables local elevation of privilege with no extra execution privileges needed. The vulnerability is classified as EoP and is documented...

CVE-2021-39745

CVE-2021-39745 affects Android 12L and is described in multiple feeds as a side-channel information disclosure in DevicePolicyManager that could let an attacker determine whether an app is installed without query permissions. The vulnerability enables local information disclosure with no addition...

CVE-2021-39754

Technical details about CVE-2021-39754 are not publicly disclosed in the provided connected documents. Monitor for updates.

CVE-2021-39786

CVE-2021-39786 affects Android 12L NFC component and is characterized by an out-of-bounds write due to a missing bounds check, enabling local privilege escalation to SYSTEM with no user interaction. Affected: Android 12L devices; trigger by NFC handling (component/file not deeply detailed in the ...

CVE-2022-20066

CVE-2022-20066 affects the atf (hwfde) component. The issue is described as an incorrect error handling path that can cause a local information disclosure leak, with privileges required to execute (System) and no user interaction needed for exploitation. The vulnerability is associated with Media...

CVE-2022-20076

CVE-2022-20076 affects the ged component, with root cause described as memory corruption due to incorrect error handling. The impact is local information disclosure and potential system-level execution privileges, with exploitation not requiring user interaction. A patch is identified (ALPS058388...