CVE-2023-21048

CVE-2023-21048 affects Android kernel (nan.cpp, handleEvent). Root cause: missing bounds check causing out-of-bounds read. Impact: local information disclosure with SYSTEM privileges required; no user interaction. Exploitation status is not detailed in the provided documents. Mitigation reference...

CVE-2022-20596

CVE-2022-20596 : The vulnerability is in the Android kernel’s WirelessCharger.cpp, in the sendChunk function, where a missing bounds check leads to an out-of-bounds write. This can cause local privilege escalation with System execution privileges required. Exploitation does not require user inter...

CVE-2022-20602

CVE-2022-20602 is mapped to the Android kernel with impact described as Information Disclosure (ID) and a high overall severity (CVSS base 7.5). The vulnerability is associated with the Android kernel in Pixel devices, and is listed under Pixel components in the Android Pixel security bulletin fo...

CVE-2022-21756

CVE-2022-21756 concerns a MediaTek WLAN driver flaw where an incorrect bounds check permits an out-of-bounds read, potentially causing local information disclosure with higher-privilege execution. Impact is described as requiring System privileges with no user interaction; attack vector is local....

CVE-2022-21774

CVE-2022-21774 describes a use-after-free in the TEEI driver caused by a race condition, enabling local escalation of privileges to SYSTEM with no user interaction required. Documents from Red Hat and NVD confirm the flaw and patch ALPS06641447/ALPS06641447 as a fix. The available sources do not ...

CVE-2022-21781

The CVE-2022-21781 entry concerns a MediaTek WLAN driver with an out-of-bounds write caused by a missing bounds check. The vulnerability could allow local escalation of privilege to System level with no user interaction required. Impact is described as partial confidentiality/integrity/availabili...

CVE-2022-28787

CVE-2022-28787 affects the wmfextractor library, with the root cause described as an improper buffer size check logic that allows an out-of-bounds read, leading to a possible temporary denial of service. A patch adding buffer size checks was released before SMR May-2022 Release 1. Remediation is ...

CVE-2022-30729

CVE-2022-30729: Implicit Intent hijacking vulnerability in Samsung Settings prior to SMR Jun-2022 Release 1 enables retrieval of Wi‑Fi SSID and passwords via a malicious QR scanner. Affected component: Samsung Settings; root cause is misuse of implicit intents that can be hijacked by unprivileged...

CVE-2022-36850

CVE-2022-36850 is a path traversal vulnerability in Samsung CallBGProvider present before SMR Sep-2022 Release 1. The issue could allow an attacker to overwrite arbitrary files using the device UID, with local attack requirements (low privileges, no user interaction). The CVE is addressed by appl...

CVE-2022-36857

CVE-2022-36857 affects Samsung Photo Editor prior to SMR Sep-2022 Release 1. The root cause is improper authorization that allows physical attackers to read internal application data. Affected component is the Photo Editor within Samsung mobile devices running the referenced Software Maintenance ...

CVE-2022-42509

CVE-2022-42509 affects the Android kernel component in the function CallDialReqData::encode (callreqdata.cpp). The issue is described as an out-of-bounds write caused by a missing bounds check, which could enable a local escalation of privilege with System execution privileges required. Exploitat...

CVE-2022-42521

CVE-2022-42521 affects the Android kernel component wlandata.cpp where the encode path can trigger an out-of-bounds write due to improper input validation. The exploitation requires local access (LOCAL) with high privileges (PR:H) and no user interaction. Impact is defined as full compromise of c...

CVE-2023-20977

CVE-2023-20977 is an Android/Pixel issue involving an out-of-bounds read in btm_ble_read_remote_features_complete within btm_ble_gap.cc. The root cause is improper input validation, enabling a local information disclosure if the device firmware is compromised with System privileges; exploitation ...

CVE-2023-20979

CVE-2023-20979 corresponds to a buffer/read out-of-bounds issue in GetNextSourceDataPacket() of bta_av_co.cc on Android 13. The underlying cause is a missing bounds check, enabling local information disclosure with no user interaction and no extra privileges. In practice, exploits are not detaile...

CVE-2023-20998

CVE-2023-20998 affects Android 13 and related Pixel/Android components. The issue is described as an input validation flaw that can trigger a persistent reboot loop, causing local denial of service. Exploitation requires privileges (local) but does not require user interaction. Connected sources ...

CVE-2023-21053

CVE-2023-21053 concerns the Android kernel component related to cellular SMS handling. In the function sms_ExtractCbLanguage within sms_CellBroadcast.c, there is an out-of-bounds read caused by a missing bounds check. This leads to a potential information disclosure without requiring execution pr...

CVE-2023-21055

In CVE-2023-21055, a use-after-free due to a race condition exists in the dit_hal_ioctl function of dit.c in the Android kernel. This vulnerability can enable local escalation of privilege with SYSTEM privileges needed, and does not require user interaction. Affected component is the Android kern...

CVE-2023-21059

CVE-2023-21059 affects the Android kernel: in EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a missing bounds check causing an out-of-bounds read. This can enable remote information disclosure without privileges and without user interaction. Affected component: Andro...

CVE-2023-21067

CVE-2023-21067 is described as affecting the Android kernel in Pixel devices. The Pixel security bulletin lists CVE-2023-21067 under the Pixel section and ties fixes to the 2023-03-01 patch level, indicating a remediation exists there. The available documents do not provide explicit root cause de...

CVE-2023-21157

CVE-2023-21157 involves a heap buffer overflow in the Android kernel component wlandata.cpp, causing an out-of-bounds write that can lead to local privilege escalation with system-level privileges. The issue is triggered without user interaction. Affected software is Android kernel (wlandata.cpp)...

CVE-2023-21168

CVE-2023-21168 affects Android 13 and specifically the ColorConverter.cpp function convertCbYCrY, where a missing bounds check may cause an out-of-bounds read and local information disclosure without requiring user interaction. Multiple sources (NVD entry, Red Hat advisory, PRION/OSV enrichment, ...

CVE-2023-21330

CVE-2023-21330 is an information-disclosure vulnerability in Android’s Overlay Manager. The issue allows a local attacker to determine whether an app is installed without query permissions via a side-channel, enabling information disclosure without additional execution privileges. Documented in m...

CVE-2024-20051

The flashc module in MediaTek chips is vulnerable to a system crash caused by an uncaught exception . This flaw can lead to a local denial of service (DoS) when triggered with System execution privileges . Exploitation does not require user interaction. While specific affected versions are not li...

CVE-2024-27232

A missing null check in the asn1_ec_pkey_parse function of asn1_common.c leads to a possible out-of-bounds (OOB) read . This vulnerability affects the GSC subcomponent on Google Pixel devices and OpenSSL (affected versions not specified). An attacker could exploit this to cause local information ...

CVE-2024-29738

A security vulnerability exists in the ACPM subcomponent of Google Pixel devices due to a missing bounds check in the gov_init module. This oversight leads to a possible out-of-bounds read , which can result in local information disclosure without requiring additional execution privileges. The vu...

CVE-2024-29778

CVE-2024-29778 : Vulnerability in ProtocolPsDedicatedBearInfoAdapter::processQosSession (protocolpsadapter.cpp) with a missing bounds check causing an out-of-bounds read. This could enable local information disclosure and require baseband firmware compromise; exploitation does not require user in...

CVE-2024-32905

CVE-2024-32905 affects Google Pixel devices via the circ_read path in link_device_memory_legacy.c, where an incorrect bounds check can cause an out-of-bounds write. This can enable remote code execution without user interaction. The Pixel security bulletin groups this under the cpif subcomponent ...

CVE-2024-32912

Summary: CVE-2024-32912 describes a persistent Denial of Service caused by test/debugging code left in a production build, enabling local DoS without extra privileges or user interaction. Affected context (from connected docs): Multiple sources reference a local-DoS issue on Google Pixel/Android ...

CVE-2025-0086

Google Android is affected by a local information disclosure vulnerability in the AccountManagerService component. The root cause is a missing permission check within the onResult function of AccountManagerService.java , which allows an attacker to overwrite an authentication token . This exploit...

CVE-2025-22412

Google Android contains a memory misreference vulnerability (specifically a use after free ) within multiple functions of sdp_server.cc . The root cause is a logic error in the code responsible for freeing up memory. This flaw could allow a remote attacker to achieve code execution on the system ...

CVE-2016-6729

CVE-2016-6729 is an elevation-of-privilege vulnerability in the Qualcomm bootloader used by Android prior to 2016-11-05. A local malicious app could execute arbitrary code in kernel context, potentially leading to permanent device compromise that may require reflashing. Android ID: A-30977990; re...

CVE-2017-0509

CVE-2017-0509 is an elevation-of-privilege in the Broadcom Wi‑Fi driver that could let a local malicious app execute arbitrary code in the kernel. Affected product: Android. Root cause: Broadcom Wi‑Fi driver vulnerability enabling local code execution with no privileges required and user interact...

CVE-2018-9475

The CVE-2018-9475 issue affects Android’s Bluetooth stack (HeadsetInterface::ClccResponse in btif_hf.cc), causing an out-of-bounds stack write that could enable remote elevation of privilege via Bluetooth when SIP calls are enabled, with no user interaction required. Exploitation details are not ...

CVE-2020-0050

CVE-2020-0050 is an Android System issue affecting Android 10 where in nfa_hciu_send_msg (nfa_hci_utils.cc) an out-of-bounds write can occur due to improper input validation. This could enable local elevation of privilege in the NFC server with system-level execution privileges; exploitation does...

CVE-2021-0547

CVE-2021-0547 concerns a local elevation-of-privilege vulnerability in Android 11. In NetInitiatedActivity.java onReceive, an attacker-controlled value can be supplied to a GPS HAL handler due to a missing permission check, enabling local privilege escalation with undefined behavior in some HAL i...

CVE-2021-1025

CVE-2021-1025 (Android 12) involves a flaw in hasNamedWallpaper in WallpaperManagerService.java that can reveal whether an app is installed without query permissions, causing local information disclosure without extra execution privileges. The root cause is a missing permission check. Impact is i...

CVE-2021-39639

CVE-2021-39639 affects the Android kernel component (fvp.c) with a missing permission check in TBD, enabling local escalation of privilege when an attacker has physical access to device internals. The vulnerability could be exploited without user interaction; attack vector is physical and impact ...

CVE-2021-39744

CVE-2021-39744 affects Android 12L and is described in Android 12L security release notes. The vulnerability arises in the DevicePolicyManager, enabling a side-channel that can determine whether an app is installed without query permissions, leading to local information disclosure without additio...

CVE-2022-20188

CVE-2022-20188 concerns the Android kernel in Pixel/Android devices. Public data in NVD shows CVSSv3.1 base score 7.5 (Network attack, no user interaction, confidentiality impact High; integrity/availability None). The Pixel security bulletin (June 2022) lists this CVE among fixes for Pixel devic...

CVE-2022-20198

CVE-2022-20198 affects Android 12L, with a flaw in the NFC stack: in llcp_dlc_proc_connect_pdu (llcp_dlc.cc) there is an out-of-bounds read due to a missing bounds check. This can lead to local information disclosure and requires system privileges; no user interaction is needed. Connected sources...

CVE-2022-20373

CVE-2022-20373 affects the Android kernel, specifically the st21nfc_loc_set_polaritymode function in fc/st21nfc.c. The issue is a use-after-free caused by a race condition, enabling local elevation of privilege with SYSTEM privileges required and no user interaction needed. Connected sources (Red...

CVE-2022-20382

CVE-2022-20382 affects the Android kernel (kernel components). The description cites a possible out-of-bounds write due to a kernel stack overflow, enabling local escalation of privilege with System privileges required and no user interaction needed. Several connected sources (NVD, Red Hat, SUSE,...

CVE-2022-20504

In Android 13, CVE-2022-20504 is a local elevation-of-privilege issue in DreamManagerService.java caused by missing permission checks in multiple locations. The vulnerability could allow an attacker with local access to elevate privileges and dismiss system dialogs without requiring user interact...

CVE-2022-20508

CVE-2022-20508 affects Android 13. In ConfigureWifiSettings.java (onAttach), a permissions bypass could let a guest user change Wi‑Fi settings, enabling local privilege escalation with no extra execution privileges or user interaction. CVSS v3.1 metrics indicate LOCAL, LOW attack complexity, with...

CVE-2022-20539

CVE-2022-20539 affects Android-13; the issue is in parameterToHal of Effect.cpp where a missing bounds check can cause an out-of-bounds write. This may enable local escalation of privilege in the audio server with system execution privileges, and requires no user interaction. Documents consistent...

CVE-2022-20545

CVE-2022-20545 affects Android 13 on Google Pixel devices. The issue resides in the MediaControlPanel.java function bindArtworkAndColors, where improper input validation can crash the phone, causing a remote denial of service with no additional execution privileges required. Exploitation does not...

CVE-2022-20559

CVE-2022-20559 affects Android 13, describing a side-channel disclosure in revokeOwnPermissionsOnKill within PermissionManager.java that may allow an app to be detected as installed without query permissions. The issue results in local information disclosure with no additional execution privilege...

CVE-2022-20599

CVE-2022-20599 affects Google Pixel firmware/kernel components. The vulnerability is described as an exposure of sensitive memory due to a missing bounds check in Pixel firmware, which can lead to local elevation of privilege with System execution privileges required. The impact is indicated as h...

CVE-2022-20606

The CVE-2022-20606 entry concerns SAEMM_MiningCodecTableWithMsgIE in SAEMM_RadioMessageCodec.c, where a missing bounds check can cause an out-of-bounds read. This could enable remote information disclosure with system privileges required. User interaction is not required. Connected sources confir...

CVE-2022-20610

CVE-2022-20610 : In Android Pixel devices, a vulnerability in the cellular modem firmware (Pixel cellular modem) enables a possible out-of-bounds read due to a missing bounds check, which could allow remote code execution. Exploitation is network-based with no user interaction required; LTE authe...