CVE-2023-20828

The CVE-2023-20828 issue affects the gps component in MediaTek chips (GPS) with an out-of-bounds write caused by a missing bounds check. This can lead to local privilege escalation with SYSTEM rights and does not require user interaction. Affected details are supported by multiple sources (NVD/Re...

CVE-2023-20974

CVE-2023-20974 affects Android 13. The issue is in the function btm_ble_add_resolving_list_entry_complete in btm_ble_privacy.cc , where a missing bounds check can cause an out-of-bounds read. This may lead to local information disclosure and could enable system-level execution privileges, with no...

CVE-2023-20998

CVE-2023-20998 affects Android 13 and related Pixel/Android components. The issue is described as an input validation flaw that can trigger a persistent reboot loop, causing local denial of service. Exploitation requires privileges (local) but does not require user interaction. Connected sources ...

CVE-2023-21048

CVE-2023-21048 affects Android kernel (nan.cpp, handleEvent). Root cause: missing bounds check causing out-of-bounds read. Impact: local information disclosure with SYSTEM privileges required; no user interaction. Exploitation status is not detailed in the provided documents. Mitigation reference...

CVE-2023-21051

CVE-2023-21051 affects the Android kernel via the path dwc3_exynos_clk_get in dwc3-exynos.c, where an incorrect bounds check can cause an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required; exploitation is described as local and does not req...

CVE-2023-21053

CVE-2023-21053 concerns the Android kernel component related to cellular SMS handling. In the function sms_ExtractCbLanguage within sms_CellBroadcast.c, there is an out-of-bounds read caused by a missing bounds check. This leads to a potential information disclosure without requiring execution pr...

CVE-2023-21056

CVE-2023-21056 affects the Android kernel LWIS subsystem, specifically the lwis_slc_buffer_free function in lwis_device_slc.c. The vulnerability is a memory corruption rooted in type confusion, enabling local escalation of privilege with System execution privileges required. Exploitation is local...

CVE-2023-21168

CVE-2023-21168 affects Android 13 and specifically the ColorConverter.cpp function convertCbYCrY, where a missing bounds check may cause an out-of-bounds read and local information disclosure without requiring user interaction. Multiple sources (NVD entry, Red Hat advisory, PRION/OSV enrichment, ...

CVE-2023-21190

CVE-2023-21190 affects Android 13 devices, with the issue located in btm_acl_encrypt_change within btm_acl.cc. A remote device can turn off encryption without terminating the connection, potentially enabling local information disclosure and requiring user interaction for exploitation. Exploitatio...

CVE-2023-21199

CVE-2023-21199 affects Android 13; the issue is in btu_ble_proc_ltk_req of btu_hcif.cc where a missing bounds check allows an out-of-bounds read. This can lead to local information disclosure with System privileges required. Attack vector is LOCAL with LOW complexity and no user interaction; conf...

CVE-2023-21307

CVE-2023-21307 affects Android’s Bluetooth component. A paired Bluetooth device can bypass permissions to read the device’s long-term identifier, leading to local information disclosure without additional execution privileges; user interaction is required for exploitation. The issue is categorize...

CVE-2023-21330

CVE-2023-21330 is an information-disclosure vulnerability in Android’s Overlay Manager. The issue allows a local attacker to determine whether an app is installed without query permissions via a side-channel, enabling information disclosure without additional execution privileges. Documented in m...

CVE-2023-32809

CVE-2023-32809 : Affects the Bluetooth driver in MediaTek devices. The issue is improper access control of the register interface, enabling possible read/write access to registers. This can lead to local leakage of sensitive information with system-level privileges required for exploitation, and ...

CVE-2023-48412

CVE-2023-48412 affects the Mali driver’s private_handle_t in mali_gralloc_buffer.h. A logic error can cause an information leak, enabling local information disclosure without additional execution privileges and without user interaction. The impact is restricted to local disclosure; exploitation d...

CVE-2024-29747

CVE-2024-29747 affects the dvfs_get_lv function in dvfs.c, where a missing null check enables an out-of-bounds read. This can lead to local information disclosure with no additional privileges and no user interaction required. The connected records consistently describe the same issue, but none p...

CVE-2024-32908

CVE-2024-32908 concerns the Android media.c component: in the sec_media_protect function there is a race condition that can bypass permissions and enable local escalation of privileges. Exploitation is described as needing local access with no user interaction, but no exploit details are provided...

CVE-2024-32926

Technical details (affected products/versions/root cause/fix) are not publicly provided in the supplied documents; monitor for updates.

CVE-2025-20665

CVE-2025-20665 affects MediaTek chipsets’ devinfo component where a missing SELinux policy enables local information disclosure of the device identifier without additional privileges. Multiple sources corroborate the issue and reference patch ALPS09555228 / MSV-2760 from MediaTek’s bulletin. Impa...

CVE-2017-0509

CVE-2017-0509 is an elevation-of-privilege in the Broadcom Wi‑Fi driver that could let a local malicious app execute arbitrary code in the kernel. Affected product: Android. Root cause: Broadcom Wi‑Fi driver vulnerability enabling local code execution with no privileges required and user interact...

CVE-2017-0714

CVE-2017-0714 is a remote code execution vulnerability in Android’s media framework h263 decoder . Affected products/versions: Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause: vulnerability exists in decoding of H.263 files/streams, enabling arbitrary code execution. Docume...

CVE-2018-9402

CVE-2018-9402: A buffer overwrite in multiple functions of gl_proc.c due to a missing bounds check could lead to kernel privilege escalation. The issue is documented across several sources (NVD/Red Hat CNVD/CNNVD/CIRCL and related Android Pixel bulletin context) with no exploitation details provi...

CVE-2020-0062

CVE-2020-0062 affects Android Euicc. An information disclosure exists due to an included test certificate, enabling remote data exposure without extra privileges. Exploitation is network-based with no user interaction required. CVSSv2/3.1 base scores are 5.0 (MEDIUM) and 7.5 (HIGH) respectively. ...

CVE-2020-0117

CVE-2020-0117 affects the Android System component (aes_cmac in aes_cmac.cc), where an out-of-bounds write can occur due to an integer overflow. This could allow remote code execution in the Bluetooth server with no user interaction. Affected Android versions: 8.0–10 (Android 8.0, 8.1, 9, 10). Ex...

CVE-2021-0547

CVE-2021-0547 concerns a local elevation-of-privilege vulnerability in Android 11. In NetInitiatedActivity.java onReceive, an attacker-controlled value can be supplied to a GPS HAL handler due to a missing permission check, enabling local privilege escalation with undefined behavior in some HAL i...

CVE-2021-0869

CVE-2021-0869 affects Android kernel components, specifically DumpstateDevice.cpp GetTimeStampAndPkt. The issue is an out-of-bounds write caused by an incorrect bounds check, which the Pixel 2021-09-01 bulletin categorizes as a Remote Code Execution (RCE) vulnerability with High risk. Exploitatio...

CVE-2021-0979

The CVE-2021-0979 issue affects Android 12 and centers on ShortcutService.java in the Launcher path. The isRequestPinItemSupported function allows a cross-user leak of installed packages by bypassing permissions, enabling local information disclosure without requiring user interaction or addition...

CVE-2021-39681

CVE-2021-39681 affects the Android kernel, specifically the delete_protocol path in main.c. The flaw is a use-after-free that allows arbitrary code execution, resulting in local escalation of privilege. Exploitation is local, does not require user interaction, and does not require additional priv...

CVE-2021-39682

CVE-2021-39682 affects the Android kernel component memory_group_manager.c (function mgm_alloc_page). A bounds check is incorrect, enabling a potential out-of-bounds write that could lead to local privilege escalation without extra execution privileges or user interaction. Exploitation details ar...

CVE-2022-20098

CVE-2022-20098 affects the aee daemon and enables local information disclosure due to a missing permission check. The flaw could allow an attacker with System execution privileges to read sensitive data without user interaction. Impact is described as local access with partial confidentiality los...

CVE-2022-20179

Technical details about CVE-2022-20179 are not provided in the supplied documents; no affected component/version or impact is disclosed. Monitor for updates from official advisories.

CVE-2022-20184

CVE-2022-20184 is listed in the Pixel security bulletin under the Modem category with type ID (Information Disclosure) and moderate severity. Documents indicate it affects Google Pixel devices, specifically the Modem component, but do not provide the root cause or exact exploit details. A remedia...

CVE-2022-20379

The CVE-2022-20379 entry relates to the Android kernel (Pixel devices) where a use-after-free in lwis_buffer_alloc (lwis_buffer.c) enables arbitrary code execution, resulting in local escalation of privilege with System execution privileges required. Exploitation is described as local with no use...

CVE-2022-20513

CVE-2022-20513 affects Android-13 (Pixel) with a vulnerability in CryptoPlugin.cpp: decrypt_1_2 allows an out-of-bounds read, leading to local information disclosure. Exploitation requires local access; no user interaction is needed. Affected product context is Pixel/Android-13; mitigation guidan...

CVE-2022-20571

The CVE-2022-20571 entry documents a use-after-free in extract_metadata of dm-android-verity.c in the Android kernel, which can corrupt kernel memory. It implies local escalation of privilege to System with no user interaction required. Affected component is the kernel’s dm-verity subsystem; root...

CVE-2022-20600

CVE-2022-20600 affects the Android kernel LWIS component. The issue is described as a memory corruption out-of-bounds write that could enable local privilege escalation to SYSTEM with no user interaction required. The available documents consistently note this as a local attack surface on Android...

CVE-2022-21746

CVE-2022-21746 affects the imgsensor component in MediaTek chips, where a missing bounds check can cause an out-of-bounds read. This can lead to local denial of service with system execution privileges, without user interaction. The entry notes a patch identified as ALPS06479698 (Issue ALPS064796...

CVE-2022-21749

CVE-2022-21749 relates to a vulnerability in the telephony stack where a missing permission check can lead to local information disclosure without requiring execution privileges. The core issue is described as a permission-check bypass in telephony, enabling information disclosure with no user in...

CVE-2022-21752

CVE-2022-21752 concerns a vulnerability in the WLAN driver where a missing bounds check allows an out-of-bounds write, enabling local privilege escalation with System execution privileges required. User interaction is not needed and the issue is described consistently across multiple sources (e.g...

CVE-2022-21774

CVE-2022-21774 describes a use-after-free in the TEEI driver caused by a race condition, enabling local escalation of privileges to SYSTEM with no user interaction required. Documents from Red Hat and NVD confirm the flaw and patch ALPS06641447/ALPS06641447 as a fix. The available sources do not ...

CVE-2022-21788

CVE-2022-21788 affects the scp component and is caused by undefined behavior stemming from incorrect error handling. The issue can enable local privilege escalation with system execution privileges; exploitation does not require user interaction. A patch is identified (ALPS06988728/ALPS06988728) ...

CVE-2022-28787

CVE-2022-28787 affects the wmfextractor library, with the root cause described as an improper buffer size check logic that allows an out-of-bounds read, leading to a possible temporary denial of service. A patch adding buffer size checks was released before SMR May-2022 Release 1. Remediation is ...

CVE-2022-30729

CVE-2022-30729: Implicit Intent hijacking vulnerability in Samsung Settings prior to SMR Jun-2022 Release 1 enables retrieval of Wi‑Fi SSID and passwords via a malicious QR scanner. Affected component: Samsung Settings; root cause is misuse of implicit intents that can be hijacked by unprivileged...

CVE-2023-20991

CVE-2023-20991 corresponds to a buffer/bounds issue in the Pixel ble_scanner_hci_interface.cc function btm_ble_process_periodic_adv_sync_lost_evt. The vulnerability is an out-of-bounds read that could enable local information disclosure with System privileges and requires no user interaction. Evi...

CVE-2023-21044

CVE-2023-21044 relates to the Android kernel and the initialization of VendorGraphicBufferMeta. The issue is an out-of-bounds read caused by a missing bounds check in init, enabling potential local information disclosure with System execution privileges required. Exploitation is described as loca...

CVE-2023-21063

CVE-2023-21063 affects Android kernel components (ParseWithAuthType in simdata.cpp) and is described as an out-of-bounds read that can enable local privilege escalation with SYSTEM-level privileges required. Multiple connected sources confirm the issue and its Android/Pixel context, including Pix...

CVE-2023-21064

CVE-2023-21064 affects Android kernel components (DoSetPinControl in miscservice.cpp) with a possible out-of-bounds read caused by a missing bounds check. The vulnerability could enable a local elevation of privilege to System-level execution without user interaction. Affected context includes An...

CVE-2023-21150

CVE-2023-21150 affects the Android kernel, specifically the function handle_set_parameters_ctrl in hal_socket.c. The vulnerability is an out-of-bounds read caused by an incorrect bounds check, leading to potential local information disclosure with System privileges required. No exploitation detai...

CVE-2023-35660

Summary: CVE-2023-35660 describes a use-after-free in lwis_transaction_client_cleanup (lwis_transaction.c) that can corrupt memory and enable local privilege escalation with SYSTEM privileges; exploitation does not require user interaction. The vulnerability is reported across multiple feeds (NVD...

CVE-2023-35685

CVE-2023-35685 describes a logic error in DevmemIntMapPages within the file devicemem_server.c that can cause a physical page use-after-free. This USE-After-FREE condition could enable local privilege escalation in the kernel without requiring additional execution privileges or user interaction. ...

CVE-2023-48352

CVE-2023-48352 is described as a local denial-of-service in phasecheckserver due to an out-of-bounds write from a missing bounds check. Connected sources tie this to UNISOC Android components (Android/Unisoc stack) and reiterate the same description across Red Hat/NVD entries. The documents do no...