CVE-2022-21749

CVE-2022-21749 relates to a vulnerability in the telephony stack where a missing permission check can lead to local information disclosure without requiring execution privileges. The core issue is described as a permission-check bypass in telephony, enabling information disclosure with no user in...

CVE-2022-21779

CVE-2022-21779 affects the MediaTek WLAN driver (multiple MediaTek chips). The vulnerability is a missing bounds check that enables a local out-of-bounds write, leading to privilege escalation with SYSTEM execution privileges required; no user interaction is needed. Patch ID: ALPS06704526; Issue ...

CVE-2022-22263

The CVE-2022-22263 issue affects Samsung SecSettings: an unprotected dynamic receiver in SecSettings allows untrusted apps to launch arbitrary activities due to a privilege misconfiguration. This is tied to the Samsung SMR Jan-2022 Release 1 update and has been referenced in multiple sources (inc...

CVE-2022-25833

The CVE-2022-25833 entry concerns Samsung SMR prior to Apr-2022 Release 1, where improper authentication in ImsService could allow an attacker to obtain IMSI without the READ_PRIVILEGED_PHONE_STATE permission. The vulnerability involves authentication checks in ImsService, enabling local access t...

CVE-2022-27832

The CVE-2022-27832 entry concerns the media.extractor library, where an improper boundary check can be exploited to cause a denial of service via a crafted media file. Affected component: media.extractor library; root cause: boundary check flaw; impact: denial of service (local attacker, low expl...

CVE-2022-28786

The CVE-2022-28786 entry concerns the aviextractor library where an improper buffer size check allows an out-of-bounds read, potentially causing a temporary denial of service. The vulnerability is stated as fixed by a patch that adds buffer size checking logic, with remediation delivered through ...

CVE-2022-33719

CVE-2022-33719 affects Samsung baseband prior to SMR Aug-2022 Release 1, where improper input validation can cause an integer overflow that leads to a heap overflow. The issue is tied to the baseband component and is mitigated by upgrading to SMR Aug-2022 Release 1 or later. Documentation does no...

CVE-2022-47322

CVE-2022-47322 describes a local DoS in the WLAN driver caused by missing parameter validation in the WLAN subsystem. The vulnerability is reported across multiple sources (NVD entry and Red Hat advisory; CNNVD references Qualcomm chip WLAN driver) without public exploit details in the provided d...

CVE-2023-20970

CVE-2023-20970 is a confirmed Android 13 vulnerability affecting p2p_iface.cpp with an out-of-bounds read caused by a missing bounds check. Exploitation is described as a local information disclosure vulnerability requiring high privileges and no user interaction. Multiple connected records (RH, ...

CVE-2023-20985

CVE-2023-20985 concerns an out-of-bounds write in BTA_GATTS_HandleValueIndication within bta_gatts_api.cc due to improper input validation. Affects Android 13; exploitation would enable local elevation of privilege with no user interaction required. The connected sources describe the vulnerabilit...

CVE-2023-20999

CVE-2023-20999 refers to a local DoS on Android 13 caused by improper input validation that can trigger a persistent reboot loop. The exploit requires no user interaction, with a local attack vector and a high availability impact as per NVD metrics. Connected sources consistently describe the iss...

CVE-2023-21015

CVE-2023-21015 affects Android 13, involving the GetAvailabilityStatus path of several Transcode Permission Controllers. The root cause is a missing permission check that could permit a local escalation of privilege with no extra execution privileges or user interaction required. The vulnerabilit...

CVE-2023-21064

CVE-2023-21064 affects Android kernel components (DoSetPinControl in miscservice.cpp) with a possible out-of-bounds read caused by a missing bounds check. The vulnerability could enable a local elevation of privilege to System-level execution without user interaction. Affected context includes An...

CVE-2023-21158

CVE-2023-21158 is an Android kernel issue in the encode function of miscdata.cpp where a heap buffer overflow can cause an out-of-bounds read. The described impact is local information disclosure with system privileges required (no user interaction needed). Public exploitation details are not pro...

CVE-2023-21182

CVE-2023-21182 affects Android 13 exploiting an out-of-bounds read in Exynos_parsing_user_data_registered_itu_t_t35 within VendorVideoAPI.cpp due to a missing bounds check. This could enable local information disclosure with System privileges; no user interaction required. Public docs here confir...

CVE-2023-21190

CVE-2023-21190 affects Android 13 devices, with the issue located in btm_acl_encrypt_change within btm_acl.cc. A remote device can turn off encryption without terminating the connection, potentially enabling local information disclosure and requiring user interaction for exploitation. Exploitatio...

CVE-2023-21192

CVE-2023-21192 affects Android 13 and is tied to InputMethodManagerService.setInputMethodWithSubtypeIdLocked, where improper input validation can allow configuring input methods that are not enabled, leading to local elevation of privilege without extra user interaction. The vulnerability descrip...

CVE-2023-21201

CVE-2023-21201 involves the Android Bluetooth SDP server: in on_create_record_event of btif_sdp_server.cc there is an out-of-bounds read due to a missing null check. This can lead to a remote denial of service without extra privileges and without user interaction. The issue is tied to Android-13 ...

CVE-2023-21213

CVE-2023-21213 affects Android-13 (sta_iface.cpp, initiateTdlsTeardownInternal): a missing bounds check leads to an out-of-bounds read in the wifi server, enabling local information disclosure with System privileges and no user interaction required. Multiple connected sources reiter the same root...

CVE-2023-44216

The CVE-2023-44216 entry concerns PVRIC (PowerVR Image Compression) on Imagination 2018+ GPU devices. The vulnerability stems from software-transparent compression that enables cross-origin pixel-stealing attacks against SVG Filter functions like feTurbulence and feBlend (GPU.zip issue). Affected...

CVE-2023-48352

CVE-2023-48352 is described as a local denial-of-service in phasecheckserver due to an out-of-bounds write from a missing bounds check. Connected sources tie this to UNISOC Android components (Android/Unisoc stack) and reiterate the same description across Red Hat/NVD entries. The documents do no...

CVE-2024-29784

CVE-2024-29784 affects lwis_periodic_io.c (LWIS). The vulnerability is an out-of-bounds write caused by an integer overflow in prepare_response, enabling local escalation of privilege without additional privileges or user interaction. Multiple connected sources (RH CVE, NVD/NVD entries, Android P...

CVE-2024-32908

CVE-2024-32908 concerns the Android media.c component: in the sec_media_protect function there is a race condition that can bypass permissions and enable local escalation of privileges. Exploitation is described as needing local access with no user interaction, but no exploit details are provided...

CVE-2024-47026

CVE-2024-47026 affects Google Pixel devices and is due to an incorrect bounds check in gsc_gsa_rescue within gsc_gsa.c, causing an out-of-bounds read and local information disclosure without requiring user interaction. Exploitation details are not provided in the documents. Affected component: gs...

CVE-2025-22413

A logic error in multiple functions of hyp-main.c within the Google Android (or hyp ) environment can lead to a privilege escalation . This vulnerability allows for local information disclosure without requiring additional execution privileges or user interaction. While the specific affected vers...

CVE-2026-28604

CVE-2026-28604 identifies a use-after-free vulnerability caused by a race condition within the Android Debug Bridge Daemon (adbd) . This flaw allows a local attacker to elevate their context to the shell user. The vulnerability impacts Android 13, 14, 15, and 16 . Exploitation does not require ad...

CVE-2015-5588

Technical details about CVE-2015-5588 are not publicly provided in the connected documents. No affected product/version/impact is specified here. Monitor for updates in the EUVD advisories and official vendor bulletins.

CVE-2016-2068

The CVE-2016-2068 issue affects the MSM QDSP6 (sound) driver in the Linux kernel 3.x, used in Qualcomm QuIC Android contributions. The vulnerability arises in the driver when handling AUDIO_EFFECTS_WRITE (or AUDIO_EFFECTS_READ) operations, due to integer overflow and potential buffer overflow or ...

CVE-2017-0386

CVE-2017-0386 describes an elevation of privilege in the libnl library that could allow a local malicious application to execute arbitrary code within the context of a privileged process on Android. Affected products/versions include Android 5.0.2–7.1 (as listed). The impact is local code executi...

CVE-2017-0620

CVE-2017-0620 is a local elevation-of-privilege in the Qualcomm Secure Channel Manager driver on Android, allowing a malicious local app to run code in the kernel. Affected: Android devices with Kernel-3.10/3.18 (per the CVE entry). Impact per sources is High (CVSSv3: 7.0). Affected devices liste...

CVE-2017-0760

CVE-2017-0760 is a remote code execution vulnerability in the Android media framework (libstagefright) affecting Android 6.0–6.0.1 and 7.0–7.1.2. The issue is described as a vulnerability in the Media Framework that could allow code execution, with the Android bulletin noting that the most severe...

CVE-2021-0869

CVE-2021-0869 affects Android kernel components, specifically DumpstateDevice.cpp GetTimeStampAndPkt. The issue is an out-of-bounds write caused by an incorrect bounds check, which the Pixel 2021-09-01 bulletin categorizes as a Remote Code Execution (RCE) vulnerability with High risk. Exploitatio...

CVE-2021-0986

CVE-2021-0986 affects Android 12 via a logic error in DevicePolicyManagerService hasGrantedPolicy, enabling local information disclosure about the device owner/profile owner/device admin without extra privileges or user interaction. Exploitation is local; impact is partial confidentiality loss an...

CVE-2021-1033

CVE-2021-1033 affects Android 12L and involves a local elevation-of-privilege in ConnectedDevicesSliceProvider.java.java (createGeneralSlice) due to an unsafe PendingIntent. Impact: local Privilege Escalation with HIGH/Partial/Partial likelihoods in CVSS3.1 terms, with no user interaction require...

CVE-2021-25479

CVE-2021-25479 affects the Exynos CP Chipset. The issue is a heap-based buffer overflow in the chipset before SMR Oct-2021 Release 1, leading to arbitrary memory writes and potential code execution. The primary documented impact is memory corruption with potential device compromise; exploitation ...

CVE-2022-20039

CVE-2022-20039 affects MediaTek’s ccu driver. The issue is memory corruption caused by an integer overflow in the ccu component, enabling local escalation of privilege with System execution privileges required. User interaction is not needed. Patch ID ALPS06183345 (Issue ALPS06183345) provides mi...

CVE-2022-20068

CVE-2022-20068 affects MediaTek devices where the vulnerable component is the mobile_log_d process, due to improper link resolution allowing symbolic link following. The issue could enable local escalation of privilege with System execution privileges required, and exploitation does not require u...

CVE-2022-20075

CVE-2022-20075 refers to a vulnerability in ged caused by an integer overflow that leads to a possible out-of-bounds write, enabling local escalation of privileges with System execution privileges required. User interaction is not required. Patch ALPS05838808 (Issue ALPS05838808) is noted as reme...

CVE-2022-20097

CVE-2022-20097 affects the aee daemon and describes a race-condition causing local information disclosure with no extra privileges required. Exploitation requires no user interaction. The vulnerability is associated with a patch ALPS06383944 (Issue ALPS06383944). Connected sources confirm the iss...

CVE-2022-20100

CVE-2022-20100 affects the aee daemon and stems from a missing permission check, enabling local information disclosure with potential System privileges. Exploitation does not require user interaction. Multiple sources (NVD, Red Hat, CVE lists) describe the issue and reference patch ALPS06383944 /...

CVE-2022-20241

CVE-2022-20241 affects Android 13 Messaging, where improper input validation allows attaching a private file to an SMS, enabling local information disclosure without extra privileges. Impact is Information Disclosure (C) with Local attack vector and no user interaction required per NVD metrics (C...

CVE-2022-20380

According to the Pixel security bulletin, CVE-2022-20380 is listed under the Pixel component Modem with type ID (information disclosure) and High severity. The entry is tied to Android devices via a modem-related information-disclosure issue, not clearly specifying kernel-level impact in this bul...

CVE-2022-20407

CVE-2022-20407 affects the Android kernel as cited in the Pixel security bulletin, with the vulnerability categorized under the Modem component and rated DoS (Moderate) in that context. The CVSSv3.1 base score is 7.5 (Network attack vector, Low attack complexity, No privileges required, No user i...

CVE-2022-20506

The CVE-2022-20506 entry applies to Android 13, where in WifiDialogActivity.java the onCreate path lacks a required permission check. This permits local privilege escalation from a guest user with no additional execution privileges, and exploitation requires no user interaction. Public details co...

CVE-2022-20560

CVE-2022-20560 is tied to the Android kernel as described in connected sources (e.g., PRION listing). The vulnerability is characterized as code injection in the Android kernel, affecting Android kernel components on Pixel devices (Android ID A-212623833). CVSSv3.1 from NVD indicates network atta...

CVE-2022-20564

CVE-2022-20564 affects the Android kernel’s ufdt code path. The issue is an out-of-bounds write in _ufdt_output_strtab_to_fdt (ufdt_convert.c) caused by an incorrect bounds check, enabling possible local escalation of privilege with SYSTEM privileges required. User interaction is not needed for e...

CVE-2022-20575

The CVE-2022-20575 entry concerns Android kernel code: an out-of-bounds read in read_ppmpu_info() within drm_fw.c due to an incorrect bounds check, enabling local information disclosure without extra privileges or user interaction. Affected component: Android kernel (drm_fw.c read_ppmpu_info). Im...

CVE-2022-21752

CVE-2022-21752 concerns a vulnerability in the WLAN driver where a missing bounds check allows an out-of-bounds write, enabling local privilege escalation with System execution privileges required. User interaction is not needed and the issue is described consistently across multiple sources (e.g...

CVE-2022-25815

The CVE-2022-25815 entry corresponds to a PendingIntent hijacking vulnerability in the Samsung Weather application. Connected sources confirm a local privilege/unauthorized action risk via hijacking PendingIntent in Weather prior to SMR Mar-2022 Release 1. Impacts are described as enabling local ...

CVE-2022-33731

CVE-2022-33731 involves an improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1. The issue allows an attacker with local access to enable or disable arbitrary components within DesktopSystemUI. Affected software: DesktopSystemUI (pre-SMR Aug-2022 Release 1). Ro...