CVE-2022-20382

CVE-2022-20382 affects the Android kernel (kernel components). The description cites a possible out-of-bounds write due to a kernel stack overflow, enabling local escalation of privilege with System privileges required and no user interaction needed. Several connected sources (NVD, Red Hat, SUSE,...

CVE-2022-33717

The CVE-2022-33717 issue affects Samsung SEM TA Module before SMR Aug-2022 Release 1, where missing input validation before memory reads allows a local attacker to read out-of-bounds memory. Affected component: SEM TA memory-read path within the ROM/TA environment (Sem Ta). Impact is confidential...

CVE-2022-42501

CVE-2022-42501 involves an out-of-bounds write in HexString2Value within util.cpp. The vulnerability affects Android kernel components and can enable local escalation of privilege with System execution privileges, without user interaction. Exploitation details, affected versions, and remediation ...

CVE-2022-42509

CVE-2022-42509 affects the Android kernel component in the function CallDialReqData::encode (callreqdata.cpp). The issue is described as an out-of-bounds write caused by a missing bounds check, which could enable a local escalation of privilege with System execution privileges required. Exploitat...

CVE-2023-20976

CVE-2023-20976 affects Android 13 where the vulnerability exists in getConfirmationMessage of DefaultAutofillPicker.java . Improper input validation may mislead a user into selecting the default autofill application, enabling a local privilege escalation with no extra execution privileges require...

CVE-2023-21067

CVE-2023-21067 is described as affecting the Android kernel in Pixel devices. The Pixel security bulletin lists CVE-2023-21067 under the Pixel section and ties fixes to the 2023-03-01 patch level, indicating a remediation exists there. The available documents do not provide explicit root cause de...

CVE-2023-21201

CVE-2023-21201 involves the Android Bluetooth SDP server: in on_create_record_event of btif_sdp_server.cc there is an out-of-bounds read due to a missing null check. This can lead to a remote denial of service without extra privileges and without user interaction. The issue is tied to Android-13 ...

CVE-2023-21358

CVE-2023-21358 affects Google Android UWB: a malicious app can masquerade as the system app com.android.uwb.resources due to improper crypto usage, enabling local elevation of privilege with no extra execution privileges and no user interaction required. CVSSv3.1 base score 7.8 (HIGH) with LOCAL ...

CVE-2023-21377

CVE-2023-21377 : Concrete information shows a local information disclosure via a restriction bypass in the Android SELinux Policy. The issue is triggered by a permissions bypass within the policy, allowing disclosure without extra execution privileges and without user interaction. Exploitation st...

CVE-2023-35647

CVE-2023-35647 concerns Google Pixel baseband software: a missing bounds check in ProtocolEmbmsGlobalCellIdAdapter::Init() (protocolembmsadapter.cpp) allows an out-of-bounds read, leading to remote information disclosure and potential baseband firmware compromise. Exploitation requires no user in...

CVE-2023-48414

CVE-2023-48414 affects the Pixel Camera Driver. It describes a use-after-free due to a logic error, enabling local escalation of privilege with System privileges required and no user interaction. The vulnerability is categorized as EoP with a moderate impact in Pixel security bulletins, and no pu...

CVE-2024-27232

CVE-2024-27232 describes an out-of-bounds read in asn1_ec_pkey_parse of asn1_common.c due to a missing null check, enabling local information disclosure without extra privileges and no user interaction. The connected Red Hat/OSV/NVD entries confirm the root cause and impact but do not specify aff...

CVE-2024-32900

The CVE-2024-32900 issue affects the LWIS (lwis_fence_signal) path in lwis_debug.c. It describes a Use-After-Free caused by improper locking, enabling local escalation of privilege from the hal_camera_default SELinux label without additional execution privileges. The vulnerability is documented a...

CVE-2025-0084

CVE-2025-0084 is a remote code execution risk in the Android Bluetooth stack (HFP enabled) caused by an out-of-bounds write due to a use-after-free condition in multiple locations. The vulnerability could allow an attacker, with adjacent access and no user interaction, to execute code on the devi...

CVE-2015-3106

Adobe Flash Player contains a use-after-free vulnerability (CVE-2015-3106) that allows arbitrary code execution via unspecified vectors. Affected products include Flash Player before 13.0.0.292 and 14.x up to 18.x before 18.0.0.160 on Windows/macOS, and before 11.2.202.466 on Linux; Adobe AIR bef...

CVE-2017-0428

CVE-2017-0428 describes an elevation-of-privilege in the NVIDIA GPU driver that could allow a local malicious application to execute arbitrary code in kernel context on Android devices with Kernel-3.10. The Android entry notes an Android ID (A-32401526) and flags the issue as critical due to pote...

CVE-2018-15835

CVE-2018-15835 concerns Android OS battery information broadcasts. The connected materials indicate the issue arises from insecure permissions around system broadcast data, allowing apps to access high‑precision battery information without special permissions. Android versions 1.0 through 9.0 are...

CVE-2019-2013

CVE-2019-2013 affects Android rw_t3t_act_handle_sro_rsp in rw_t3t.cc, causing a possible out-of-bounds write due to a missing bounds check. This could enable local elevation of privilege with no additional execution privileges needed, and requires user interaction to exploit. Affected Android ver...

CVE-2020-13841

CVE-2020-13841 affects LG mobile devices running Android 9–10 on MTK chipsets. A vulnerable AT command handler allows attackers to bypass intended access restrictions, with a high-severity impact per NVD (CVSS v3.1: 9.8). The available documents describe the issue and affected platform but do not...

CVE-2021-0661

CVE-2021-0661 refers to an out-of-bounds write in MediaTek audio DSP caused by an incorrect bounds check. This can lead to local escalation of privilege with System execution privileges, and exploitation does not require user interaction. The issue affects MediaTek audio DSP components across mul...

CVE-2021-1025

CVE-2021-1025 (Android 12) involves a flaw in hasNamedWallpaper in WallpaperManagerService.java that can reveal whether an app is installed without query permissions, causing local information disclosure without extra execution privileges. The root cause is a missing permission check. Impact is i...

CVE-2021-39756

CVE-2021-39756 affects Android 12L Framework, where a side-channel information disclosure could allow an app to be detected as installed without query permissions, enabling local information disclosure with no execution privileges. Root cause is a leakage in Framework that can reveal installation...

CVE-2021-39787

CVE-2021-39787 affects Android 12L SystemUI. The issue enables an arbitrary Activity launch via a confused deputy, resulting in local elevation of privilege with no extra execution privileges required and a required user interaction for exploitation. Affected component: SystemUI on Android-12L; r...

CVE-2021-39791

The CVE-2021-39791 entry affects the Android component WallpaperManagerService on Android 12L, describing a side‑channel information disclosure that allows an attacker to determine whether an app is installed without query permissions, enabling local information disclosure with no additional exec...

CVE-2022-20029

CVE-2022-20029 affects MediaTek devices via the cmdq driver. The root cause is an incorrect bounds check that enables an out-of-bounds read, potentially leading to local information disclosure with System privileges. The vulnerability is documented across multiple feeds (NVD/Red Hat/CVE/CVE lists...

CVE-2022-20070

CVE-2022-20070 affects the ssmr component, with a reported out-of-bounds write caused by a missing bounds check. This can lead to local escalation of privileges, requiring SYSTEM privileges, and does not require user interaction. The issue is associated with patch ID ALPS06362920 (Issue ALPS06362...

CVE-2022-20076

CVE-2022-20076 affects the ged component, with root cause described as memory corruption due to incorrect error handling. The impact is local information disclosure and potential system-level execution privileges, with exploitation not requiring user interaction. A patch is identified (ALPS058388...

CVE-2022-20178

CVE-2022-20178 affects Android kernel components where ioctl_dpm_qos_update and ioctl_event_control_set can trigger an out-of-bounds write caused by an integer overflow. This can lead to local privilege escalation with system execution privileges required, and exploitation does not require user i...

CVE-2022-20206

CVE-2022-20206 affects Android 12L via NotificationManagerService.setPackageOrComponentEnabled, where a missing permission check enables local information disclosure about enabled notification listeners. The issue requires User privileges but not user interaction to exploit, yielding a HIGH confi...

CVE-2022-20380

According to the Pixel security bulletin, CVE-2022-20380 is listed under the Pixel component Modem with type ID (information disclosure) and High severity. The entry is tied to Android devices via a modem-related information-disclosure issue, not clearly specifying kernel-level impact in this bul...

CVE-2022-20407

CVE-2022-20407 affects the Android kernel as cited in the Pixel security bulletin, with the vulnerability categorized under the Modem component and rated DoS (Moderate) in that context. The CVSSv3.1 base score is 7.5 (Network attack vector, Low attack complexity, No privileges required, No user i...

CVE-2022-20408

CVE-2022-20408 is listed in Google Pixel security bulletin under the Modem component with Type ID and Moderate severity. The bulletin indicates patch level 2022-08-05 or later addresses all issues in that bulletin. Public details on the exact vulnerable subsystem within the modem/kernel are not f...

CVE-2022-20536

CVE-2022-20536 concerns Android 13 where in RcsService.java’s registerBroadcastReceiver a missing permission check could allow a local escalation of privilege with no extra execution privileges and without user interaction. Affected component is the registerBroadcastReceiver method in RcsService....

CVE-2022-20539

CVE-2022-20539 affects Android-13; the issue is in parameterToHal of Effect.cpp where a missing bounds check can cause an out-of-bounds write. This may enable local escalation of privilege in the audio server with system execution privileges, and requires no user interaction. Documents consistent...

CVE-2022-20559

CVE-2022-20559 affects Android 13, describing a side-channel disclosure in revokeOwnPermissionsOnKill within PermissionManager.java that may allow an app to be detected as installed without query permissions. The issue results in local information disclosure with no additional execution privilege...

CVE-2022-20577

CVE-2022-20577 affects the Android kernel component involved in the OemSimAuthRequest::encode function in wlandata.cpp, where a missing bounds check allows an out‑of‑bounds write. This can lead to local escalation of privilege with System privileges required; exploitation reportedly does not requ...

CVE-2022-20578

CVE-2022-20578 : Vulnerability in RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp can cause a stack clash and memory corruption, enabling local privilege escalation with System privileges required. The issue is exploitable locally (no user interaction) and affects Android kernels using...

CVE-2022-20596

CVE-2022-20596 : The vulnerability is in the Android kernel’s WirelessCharger.cpp, in the sendChunk function, where a missing bounds check leads to an out-of-bounds write. This can cause local privilege escalation with System execution privileges required. Exploitation does not require user inter...

CVE-2022-20610

CVE-2022-20610 : In Android Pixel devices, a vulnerability in the cellular modem firmware (Pixel cellular modem) enables a possible out-of-bounds read due to a missing bounds check, which could allow remote code execution. Exploitation is network-based with no user interaction required; LTE authe...

CVE-2022-21756

CVE-2022-21756 concerns a MediaTek WLAN driver flaw where an incorrect bounds check permits an out-of-bounds read, potentially causing local information disclosure with higher-privilege execution. Impact is described as requiring System privileges with no user interaction; attack vector is local....

CVE-2022-22263

The CVE-2022-22263 issue affects Samsung SecSettings: an unprotected dynamic receiver in SecSettings allows untrusted apps to launch arbitrary activities due to a privilege misconfiguration. This is tied to the Samsung SMR Jan-2022 Release 1 update and has been referenced in multiple sources (inc...

CVE-2022-25815

The CVE-2022-25815 entry corresponds to a PendingIntent hijacking vulnerability in the Samsung Weather application. Connected sources confirm a local privilege/unauthorized action risk via hijacking PendingIntent in Weather prior to SMR Mar-2022 Release 1. Impacts are described as enabling local ...

CVE-2022-25820

CVE-2022-25820 concerns Samsung’s fingerprint matching algorithm, with a vulnerable design present before SMR Mar-2022 Release 1. It enables a physical attacker to brute-force a screen-lock password. The issue is linked to local access and high confidentiality impact per CVSS 3.1 metrics. A fix i...

CVE-2022-28786

The CVE-2022-28786 entry concerns the aviextractor library where an improper buffer size check allows an out-of-bounds read, potentially causing a temporary denial of service. The vulnerability is stated as fixed by a patch that adds buffer size checking logic, with remediation delivered through ...

CVE-2022-36850

CVE-2022-36850 is a path traversal vulnerability in Samsung CallBGProvider present before SMR Sep-2022 Release 1. The issue could allow an attacker to overwrite arbitrary files using the device UID, with local attack requirements (low privileges, no user interaction). The CVE is addressed by appl...

CVE-2022-39900

CVE-2022-39900 affects Samsung Nice Catch prior to SMR Dec-2022 Release 1. The issue is an improper access control that could allow a physical attacker to access all toast contents generated in the Secure Folder environment via Nice Catch. Affected component: Nice Catch app (Samsung Mobile). Root...

CVE-2022-42500

CVE-2022-42500 concerns the Android kernel component where OEM_OnRequest in sced.cpp allows shell command execution due to improper input validation. This can enable local escalation of privilege to System level without user interaction. Affected software is Android kernel components related to t...

CVE-2022-47347

CVE-2022-47347 affects engineermode services where a missing permission check enables local denial of service. Primary sources (NVD/Red Hat/CVE listings and related mirrors) describe a local access/privilege issue in engineermode services without detailing exploit vectors or affected product vers...

CVE-2022-47359

CVE-2022-47359 concerns the Log Service, where a missing permission check is identified as the root cause. The exposure enables local denial of service in the log service. The available connected records consistently describe a privilege check omission as the flaw, but do not provide product/vend...

CVE-2023-20828

The CVE-2023-20828 issue affects the gps component in MediaTek chips (GPS) with an out-of-bounds write caused by a missing bounds check. This can lead to local privilege escalation with SYSTEM rights and does not require user interaction. Affected details are supported by multiple sources (NVD/Re...