CVE-2023-35660

Summary: CVE-2023-35660 describes a use-after-free in lwis_transaction_client_cleanup (lwis_transaction.c) that can corrupt memory and enable local privilege escalation with SYSTEM privileges; exploitation does not require user interaction. The vulnerability is reported across multiple feeds (NVD...

CVE-2023-35685

CVE-2023-35685 describes a logic error in DevmemIntMapPages within the file devicemem_server.c that can cause a physical page use-after-free. This USE-After-FREE condition could enable local privilege escalation in the kernel without requiring additional execution privileges or user interaction. ...

CVE-2023-48352

CVE-2023-48352 is described as a local denial-of-service in phasecheckserver due to an out-of-bounds write from a missing bounds check. Connected sources tie this to UNISOC Android components (Android/Unisoc stack) and reiterate the same description across Red Hat/NVD entries. The documents do no...

CVE-2023-48410

CVE-2023-48410 involves an out-of-bounds read in cd_ParseMsg of cd_codec.c due to a missing bounds check, enabling remote information disclosure without extra privileges or user interaction. The description is consistent across NVD, PRION, CVELIST, and CNNVD entries. Pixel/Android Bulletin refere...

CVE-2024-20051

In flashc, an uncaught exception can cause a system crash, enabling local denial of service with system execution privileges required. No user interaction is needed. A patch is referenced (ALPS08541757; ALPS08541758).

CVE-2024-29755

CVE-2024-29755 affects the tmu_get_pi function in tmu.c, causing an out-of-bounds read due to improper input validation. This can lead to local information disclosure without extra privileges or user interaction. The issue is addressed by Pixel updates; patch level 2024-04-05 or later is indicate...

CVE-2024-29784

CVE-2024-29784 affects lwis_periodic_io.c (LWIS). The vulnerability is an out-of-bounds write caused by an integer overflow in prepare_response, enabling local escalation of privilege without additional privileges or user interaction. Multiple connected sources (RH CVE, NVD/NVD entries, Android P...

CVE-2024-47014

CVE-2024-47014 affects Google Pixel devices running Android with a privilege-escalation vulnerability in the ABL component (A-330537292). Affected product: Pixel devices; vulnerability type: Elevation of Privilege (EoP). Root cause: not explicitly detailed beyond ABL involvement. Impact: privileg...

CVE-2024-47026

CVE-2024-47026 affects Google Pixel devices and is due to an incorrect bounds check in gsc_gsa_rescue within gsc_gsa.c, causing an out-of-bounds read and local information disclosure without requiring user interaction. Exploitation details are not provided in the documents. Affected component: gs...

CVE-2024-47030

CVE-2024-47030 affects Android on Google Pixel devices prior to the 2024-10-05 patch level, allowing information disclosure via the ACPM component (A-315191818). The issue is documented in multiple sources (NVD/Red Hat CNVD CNVD-2025-03022, etc.). According to the Pixel security bulletin, the vul...

CVE-2024-47032

The vulnerability CVE-2024-47032 affects the lwis_ioctl.c component, specifically the function construct_transaction_from_cmd. The issue is a heap-based out-of-bounds write that can lead to local elevation of privilege without user interaction. Exploitation details (vectors, affected products/ver...

CVE-2025-0075

CVE-2025-0075 is a use-after-free in process_service_search_attr_req of sdp_server.cc that can lead to remote code execution with no privileges or user interaction. Affected software is the Android platform (System component in the 2025-03-01/03 bulletin) and related Android sources describe this...

CVE-2026-0056

CVE-2026-0056 describes a read out of bounds in setTo of ResourceTypes.cpp, leading to local information disclosure without extra privileges. The issue is labeled as a low-severity, local vulnerability with no user interaction required. Concrete technical details beyond the affected file (Resourc...

CVE-2012-4221

CVE-2012-4221 involves an integer overflow in the Qualcomm Innovation Center (QuIC) Diagnostics (DIAG) kernel-mode driver for Android 2.3–4.2, specifically in diagchar_core.c. An attacker could exploit crafted arguments via a local diagchar_ioctl call to achieve arbitrary code execution or cause ...

CVE-2017-0722

Summary of CVE-2017-0722 : A remote code execution vulnerability in the Android media framework, specifically the h263 decoder. Affected products/versions: Android devices running 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause as stated in the provided documents is the vulnerabili...

CVE-2017-0832

CVE-2017-0832 is a remote code execution vulnerability in Android’s media framework (libmpeg2) affecting Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 and 8.0 (Android ID A-62887820). Public material in the connected documents confirms the vulnerability class (RCE) and affected components, but t...

CVE-2019-2012

CVE-2019-2012 (Android) affects Android 7.0–9 where a function rw_t3t_act_handle_fmt_rsp in rw_t3t.cc can write out of bounds due to a missing bounds check. This is a local elevation-of-privilege flaw that could be triggered with user interaction and, if exploited, would occur within a privileged...

CVE-2020-0030

CVE-2020-0030 describes a race condition in binder_thread_release within binder.c, leading to a use-after-free that can enable local privilege escalation without additional privileges or user interaction. Affected component is the Android/Linux kernel (binder subsystem). The provided connected do...

CVE-2021-0654

Summary: CVE-2021-0654 affects Android Pixel launcher (CVE entry tied to Android kernel/TaskThumbnailView.java) with information disclosure from locked profiles due to a missing permission check in isRealSnapshot. Exploitation requires user interaction; local information disclosure is possible wi...

CVE-2021-1015

CVE-2021-1015 affects Android 12 via the getMeidForSlot path in PhoneInterfaceManager.java, enabling side-channel disclosure to determine if an app is installed without query permissions. Outcome is local information disclosure with no extra privileges required and no user interaction. Connected ...

CVE-2021-1033

CVE-2021-1033 affects Android 12L and involves a local elevation-of-privilege in ConnectedDevicesSliceProvider.java.java (createGeneralSlice) due to an unsafe PendingIntent. Impact: local Privilege Escalation with HIGH/Partial/Partial likelihoods in CVSS3.1 terms, with no user interaction require...

CVE-2021-39639

CVE-2021-39639 affects the Android kernel component (fvp.c) with a missing permission check in TBD, enabling local escalation of privilege when an attacker has physical access to device internals. The vulnerability could be exploited without user interaction; attack vector is physical and impact ...

CVE-2021-39677

CVE-2021-39677 affects Android Automotive OS (AAOS) with Android 11. The issue is an OOB heap read in startVideoStream when the camera buffer is zero-sized. This is documented as a high-severity (CVSSv3.1: High) network-facing vulnerability with no user interaction required. Public materials list...

CVE-2021-39680

CVE-2021-39680 affects the Android kernel, with the flaw located in sec_SHA256_Transform within sha256_core.c. The issue allows reading heap data due to uninitialized data, enabling local information disclosure with system privileges. Exploitation does not require user interaction. The vulnerabil...

CVE-2021-39738

CVE-2021-39738 concerns Google Android CarSetings: a missing permission check allows pairing a Bluetooth device without user consent, enabling local elevation of privilege without extra execution privileges. Affected: CarSetings on Android 10, 11, 12, and 12L. Exploitation is described as local w...

CVE-2021-39743

CVE-2021-39743 affects Google Android 12L in the PackageManager component, where a missing permission check allows updating another package’s last-used time and enables local elevation of privilege with no extra execution privileges needed. The vulnerability is classified as EoP and is documented...

CVE-2021-39779

CVE-2021-39779 affects Android 12L via Telecom Service.getCallStateUsingPackage, where there is a missing permission check that could allow local information disclosure of the call state without extra execution privileges. The issue is described across sources (CVE entry and CNVD-2022-44589) as a...

CVE-2022-20039

CVE-2022-20039 affects MediaTek’s ccu driver. The issue is memory corruption caused by an integer overflow in the ccu component, enabling local escalation of privilege with System execution privileges required. User interaction is not needed. Patch ID ALPS06183345 (Issue ALPS06183345) provides mi...

CVE-2022-20064

CVE-2022-20064 affects MediaTek’s ccci subsystem, where an incorrect bounds check can leak a kernel pointer. This enables local information disclosure with System execution privileges required, and exploitation does not require user interaction. Technical details across multiple sources confirm t...

CVE-2022-20169

CVE-2022-20169 is associated with Android kernel/modem in Google Pixel devices as per the connected documents. The PRION source explicitly labels the issue as a "Code injection" vulnerability, while other documents broadly reference the Android kernel/modem context for this CVE. The exact root ca...

CVE-2022-20241

CVE-2022-20241 affects Android 13 Messaging, where improper input validation allows attaching a private file to an SMS, enabling local information disclosure without extra privileges. Impact is Information Disclosure (C) with Local attack vector and no user interaction required per NVD metrics (C...

CVE-2022-20511

CVE-2022-20511 affects Android 13 where a missing permission check in DevicePolicyManagerService.getNearbyAppStreamingPolicy could enable local information disclosure without additional privileges. The issue: local access suffices (no user interaction required) and the vulnerability is tied to in...

CVE-2022-20557

CVE-2022-20557 affects Android 13 Pixel devices. The issue is in MessageQueueBase.h (MessageQueueBase) where a missing bounds check allows an out-of-bounds read, potentially enabling local escalation of privilege with SYSTEM privileges and no user interaction. Public references note a Pixel updat...

CVE-2022-20584

CVE-2022-20584 affects the Android kernel component in the shared_mem.c file, specifically the page_number handling. The issue is described as improper input validation that can enable code execution in the secure world, leading to local escalation of privilege without extra privileges or user in...

CVE-2022-20585

CVE-2022-20585 affects the Android kernel component drm_access_control.c, specifically the function valid_out_of_special_sec_dram_addr. The issue is an elevation of privilege due to improper input validation, enabling local privilege escalation with no extra user interaction. Exploitation details...

CVE-2022-20599

CVE-2022-20599 affects Google Pixel firmware/kernel components. The vulnerability is described as an exposure of sensitive memory due to a missing bounds check in Pixel firmware, which can lead to local elevation of privilege with System execution privileges required. The impact is indicated as h...

CVE-2022-20606

The CVE-2022-20606 entry concerns SAEMM_MiningCodecTableWithMsgIE in SAEMM_RadioMessageCodec.c, where a missing bounds check can cause an out-of-bounds read. This could enable remote information disclosure with system privileges required. User interaction is not required. Connected sources confir...

CVE-2022-21781

The CVE-2022-21781 entry concerns a MediaTek WLAN driver with an out-of-bounds write caused by a missing bounds check. The vulnerability could allow local escalation of privilege to System level with no user interaction required. Impact is described as partial confidentiality/integrity/availabili...

CVE-2022-23999

CVE-2022-23999 describes a PendingIntent hijacking vulnerability in Android’s CpaReceiver prior to Samsung SMR Feb-2022 Release 1, enabling local attackers to access media files via KnoxPrivacyNoticeReceiver through an implicit Intent. Affected component is the CpaReceiver/KnoxPrivacyNoticeReceiv...

CVE-2022-27568

CVE-2022-27568 describes a heap-based buffer overflow in the parser_iloc function of the libsimba library. The vulnerability allows a remote attacker to achieve code execution and arises in versions prior to Samsung SMR Apr-2022 Release 1. The issue is documented across multiple sources (NVD, Red...

CVE-2022-27572

The cited CVE-2022-27572 is a heap-based buffer overflow in the parser_ipma function of the libsimba library. It enables remote code execution and is tied to the Samsung SMR patch cycle (prior to SMR Apr-2022 Release 1). The vulnerability has multiple corroborating records (NVD, Red Hat CVE page,...

CVE-2022-27833

CVE-2022-27833 concerns Samsung SMR DSP driver vulnerability: improper input validation enables out-of-bounds write via integer overflow in the DSP driver prior to SMR Apr-2022 Release 1. CVSS metrics indicate LOCAL attack with low privileges and high impact on confidentiality, integrity, and ava...

CVE-2022-33719

CVE-2022-33719 affects Samsung baseband prior to SMR Aug-2022 Release 1, where improper input validation can cause an integer overflow that leads to a heap overflow. The issue is tied to the baseband component and is mitigated by upgrading to SMR Aug-2022 Release 1 or later. Documentation does no...

CVE-2022-42503

CVE-2022-42503 affects Android kernel via ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria. The issue is an out-of-bounds write caused by a missing bounds check in this function, enabling local escalation of privilege with System execution privileges required. Exploitation requires no user int...

CVE-2022-42507

CVE-2022-42507 describes a potential out-of-bounds write in ProtocolSimBuilder::BuildSimUpdatePb3gEntry within the Android kernel, caused by a missing bounds check. The vulnerability could enable local escalation of privilege with System privileges required, and exploitation is stated as requirin...

CVE-2022-42532

CVE-2022-42532 affects Google/Pixel firmware and the Android kernel: an out-of-bounds read due to a missing bounds check could allow local information disclosure with system execution privileges, requiring no user interaction. The issue is documented across multiple sources (Pixel firmware discus...

CVE-2022-42533

CVE-2022-42533 affects Android kernel via an out-of-bounds write in SharedMetadata.cpp during shared_metadata_init, caused by an integer overflow. Impact is local privilege escalation with no user interaction required. Documented across multiple feeds (NVD, Red Hat, OSV) and listed in Pixel bulle...

CVE-2023-20985

CVE-2023-20985 concerns an out-of-bounds write in BTA_GATTS_HandleValueIndication within bta_gatts_api.cc due to improper input validation. Affects Android 13; exploitation would enable local elevation of privilege with no user interaction required. The connected sources describe the vulnerabilit...

CVE-2023-21004

Affected product: Android 13 devices; component: Transcode Permission Controllers (getAvailabilityStatus). Root cause: missing permission check enabling a permission bypass. Impact: local escalation of privilege with no extra execution privileges required, no user interaction needed. Exploitation...

CVE-2023-21025

CVE-2023-21025 affects Android 13, specifically the function ufdt_local_fixup_prop in ufdt_overlay.c. The vulnerability is an out-of-bounds read due to an incorrect bounds check, allowing local information disclosure with system execution privileges. Exploitation is described as local (no user in...