CVE-2016-6762

CVE-2016-6762 describes an elevation-of-privilege flaw in the libziparchive library that could allow a local malicious app to run arbitrary code with the privileges of a protected process. Affected product: Android; versions affected include 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 (Android ID A-31251826). ...

CVE-2017-0599

CVE-2017-0599 is a remote denial-of-service vulnerability in Android’s Mediaserver, specifically the libhevc component. A specially crafted media file could cause a device hang or reboot. Affected products/versions in the provided documents: Android 6.0–7.1.2. The description in the connected sou...

CVE-2017-0714

CVE-2017-0714 is a remote code execution vulnerability in Android’s media framework h263 decoder . Affected products/versions: Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause: vulnerability exists in decoding of H.263 files/streams, enabling arbitrary code execution. Docume...

CVE-2018-9402

CVE-2018-9402: A buffer overwrite in multiple functions of gl_proc.c due to a missing bounds check could lead to kernel privilege escalation. The issue is documented across several sources (NVD/Red Hat CNVD/CNNVD/CIRCL and related Android Pixel bulletin context) with no exploitation details provi...

CVE-2019-9346

CVE-2019-9346 affects the Android Media Framework (libstagefright). The issue is a heap buffer overflow causing an out-of-bounds write, enabling remote code execution. Exploitation requires user interaction. Affected product/version: Android 10. Root cause: out-of-bounds write in a heap-allocated...

CVE-2020-0048

CVE-2020-0048 affects Android 10 Media Framework (IAudioFlinger.cpp). The root cause is an information leak due to uninitialized data in onTransact, enabling local information disclosure without extra privileges or user interaction. The risk is described as a local information disclosure vulnerab...

CVE-2021-0555

CVE-2021-0555 affects Android 11 with a vulnerability in RenderStruct of protostream_objectsource.cc where a missing null check can cause a remote Denial of Service. The Red Hat and NVD entries confirm the issue’s root cause and impact; Pixel bulletin mappings show this CVE is classified as DoS (...

CVE-2021-0564

CVE-2021-0564 affects Android 11, caused by a race condition in the decrypt path of CryptoPlugin.cpp that can trigger a use-after-free. The vulnerability allows local elevation of privilege with System execution privileges and does not require user interaction. Exploitation details are not provid...

CVE-2021-39679

CVE-2021-39679 affects Android kernel graphics handling (vendor_graphicbuffer_meta.cpp). The issue is a race condition leading to a possible use-after-free, enabling local escalation of privilege without extra execution privileges, and not requiring user interaction. Documentation consistently de...

CVE-2021-39751

CVE-2021-39751 affects Android 12L due to a missing permission check in Settings that allows reading Bluetooth device names without proper permissions. The vulnerability enables local information disclosure without requiring user interaction or elevated privileges, relying on an attacker with loc...

CVE-2021-39763

CVE-2021-39763 affects Android 12L; a vulnerability in Settings due to improper input validation could allow a local attacker to escalate privileges by causing the device to enable Wi‑Fi without user interaction. Exploitation details are not provided beyond the description in the CVE entry. The A...

CVE-2021-39778

CVE-2021-39778 affects Android 12L Telecomm, where improper input validation can reveal whether an app is installed, leading to local information disclosure without privileges. Affected component: Telecomm in Android Framework; root cause: input validation flaw exposing install-state. Impact: inf...

CVE-2021-39790

CVE-2021-39790 affects Android 12L Dialer. The issue arises from a missing permission check in the Dialer component, enabling local elevation of privilege. Exploitation requires user interaction, and successful abuse could grant elevated privileges on the device. The vulnerability is classified a...

CVE-2022-20055

CVE-2022-20055 concerns the preloader (usb) in MediaTek-based devices where an out-of-bounds write occurs due to a missing bounds check. The vulnerability could enable local escalation of privilege for an attacker with physical access, with no extra execution privileges required; exploitation req...

CVE-2022-20062

In CVE-2022-20062, the issue is a memory corruption via a use-after-free in the mdp component. The root cause is use-after-free leading to local escalation of privileges with System execution privileges required. No user interaction is needed for exploitation. Patch ID: ALPS05836418 (Issue ID: AL...

CVE-2022-20077

The CVE-2022-20077 entry concerns a race-condition-based memory corruption in vow that could enable local privilege escalation to SYSTEM, with no user interaction required. Affected context and root cause are described consistently across multiple sources (e.g., Red Hat, NVD, CVE lists, PRION/CVE...

CVE-2022-20089

The CVE-2022-20089 issue concerns the MediaTek aee driver where a memory corruption vulnerability is triggered by active debug code. The flaw could enable local privilege escalation to SYSTEM with no user interaction required. Affected component: aee driver; root cause: memory corruption from deb...

CVE-2022-20102

The CVE-2022-20102 issue affects the aee daemon and stems from a missing permission check, enabling local information disclosure with System privileges. Exploitation requires no user interaction. The NVD reports CVSSv3.1 base score 4.4 (Local, Privileges Required: High, Confidentiality Impact: Hi...

CVE-2022-20286

CVE-2022-20286 affects Android 13 under the Connectivity component. A logic error can bypass the restriction on starting activities from the background, potentially enabling local privilege escalation with user privileges and no user interaction required. Documented impact: local elevation of pri...

CVE-2022-20509

CVE-2022-20509 affects Android 13 in the code path mapGrantorDescr of MessageQueueBase.h, where a missing bounds check can cause an out-of-bounds write. This could enable local escalation of privilege to SYSTEM with no user interaction, requiring local access and high privileges. The Pixel bullet...

CVE-2022-20523

CVE-2022-20523 concerns Android 13 and targets a vulnerability in the IncFs_GetFilledRangesStartingFrom function (incfs.cpp). The issue is a potential out-of-bounds read caused by a missing bounds check, which could lead to local information disclosure without requiring additional execution privi...

CVE-2022-20526

CVE-2022-20526 affects Android 13 via CanvasContext::draw in CanvasContext.cpp, where a missing bounds check can cause an out-of-bounds write and local privilege escalation. The exploit requires user interaction; no remote vector is detailed. Multiple connected sources (Red Hat advisory, NVD, OSV...

CVE-2022-20548

CVE-2022-20548 affects Android-13 where EqualizerEffect.cpp:setParameter can trigger an out-of-bounds write due to improper input validation. This is described as a local elevation of privilege with no extra execution privileges required and no user interaction needed. Public documentation refere...

CVE-2022-20550

CVE-2022-20550 affects Android 13 (Pixel devices) with a local elevation of privilege caused by a confused deputy, enabling arbitrary protected activities without user interaction. Public sources (Pixel Update Bulletin 2022-12-01) associate fixes to the 2022-12-05 patch level; no explicit vulnera...

CVE-2022-20587

CVE-2022-20587 affects Android devices via an issue in the Android kernel, in drm_fw.c within the ppmp_validate_wsm function. The vulnerability arises from improper input validation, enabling local privilege escalation with no additional privileges and no user interaction required. The CVSS vecto...

CVE-2022-20592

CVE-2022-20592 describes a vulnerability in the Android kernel’s DRM firmware, specifically in the function ppmp_validate_secbuf of drm_fw.c. The flaw stems from improper input validation, allowing local information disclosure without requiring additional execution privileges or user interaction....

CVE-2022-20605

CVE-2022-20605 affects the Android kernel component SAECOMM_Utility.c, specifically the SAECOMM_CopyBufferBytes function. The underlying issue is an incorrect bounds check that enables an out-of-bounds read, leading to potential remote information disclosure without requiring additional privilege...

CVE-2022-22263

The CVE-2022-22263 issue affects Samsung SecSettings: an unprotected dynamic receiver in SecSettings allows untrusted apps to launch arbitrary activities due to a privilege misconfiguration. This is tied to the Samsung SMR Jan-2022 Release 1 update and has been referenced in multiple sources (inc...

CVE-2022-24000

CVE-2022-24000 is confirmed by multiple sources to be a local, Privilege-Granted vulnerability in Android components (DataUsageReminderReceiver and KnoxPrivacyNoticeReceiver) where an attacker can hijack a PendingIntent via an implicit Intent to access media files without permission. The issue is...

CVE-2022-24925

CVE-2022-24925 concerns an improper input validation vulnerability in Android’s SettingsProvider prior to Android S (12). The issue can be triggered by privileged attackers to cause a permanent denial of service on a victim’s device. The available connected sources consistently identify the affec...

CVE-2022-27832

The CVE-2022-27832 entry concerns the media.extractor library, where an improper boundary check can be exploited to cause a denial of service via a crafted media file. Affected component: media.extractor library; root cause: boundary check flaw; impact: denial of service (local attacker, low expl...

CVE-2022-28786

The CVE-2022-28786 entry concerns the aviextractor library where an improper buffer size check allows an out-of-bounds read, potentially causing a temporary denial of service. The vulnerability is stated as fixed by a patch that adds buffer size checking logic, with remediation delivered through ...

CVE-2022-30721

The CVE-2022-30721 entry concerns a vulnerability in libsmkvextractor. Description: an improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1, which allows an attacker to trigger a crash. Connected sources corroborate a Samsung/Android context and ...

CVE-2022-30729

CVE-2022-30729: Implicit Intent hijacking vulnerability in Samsung Settings prior to SMR Jun-2022 Release 1 enables retrieval of Wi‑Fi SSID and passwords via a malicious QR scanner. Affected component: Samsung Settings; root cause is misuse of implicit intents that can be hijacked by unprivileged...

CVE-2022-39885

CVE-2022-39885 affects Samsung DeviceManagement, BootCompletedReceiver_CMCC component, prior to SMR Nov-2022 Release 1. Root cause: improper access control allowing a local attacker to access device information via the BootCompletedReceiver_CMCC in DeviceManagement. Impact: local disclosure of de...

CVE-2022-39900

CVE-2022-39900 affects Samsung Nice Catch prior to SMR Dec-2022 Release 1. The issue is an improper access control that could allow a physical attacker to access all toast contents generated in the Secure Folder environment via Nice Catch. Affected component: Nice Catch app (Samsung Mobile). Root...

CVE-2022-42500

CVE-2022-42500 concerns the Android kernel component where OEM_OnRequest in sced.cpp allows shell command execution due to improper input validation. This can enable local escalation of privilege to System level without user interaction. Affected software is Android kernel components related to t...

CVE-2022-47347

CVE-2022-47347 affects engineermode services where a missing permission check enables local denial of service. Primary sources (NVD/Red Hat/CVE listings and related mirrors) describe a local access/privilege issue in engineermode services without detailing exploit vectors or affected product vers...

CVE-2023-20838

CVE-2023-20838 concerns the imgsys component. Multiple connected sources confirm a race-condition–driven out-of-bounds read that can leak local information and, in some scenarios, enable system-level execution with user interaction required for exploitation. Affected references consistently descr...

CVE-2023-20846

CVE-2023-20846 concerns MediaTek chips where the vulnerability resides in the imgsys_cmdq path, caused by missing valid range checking that enables an out-of-bounds read. The documented impact is local information disclosure with system-level execution privileges required, and exploitation report...

CVE-2023-20969

CVE-2023-20969 describes an out-of-bounds read in multiple locations of p2p_iface.cpp, leading to possible local information disclosure with system execution privileges required. The Android 13 context is documented, with impact on confidentiality (C:H) and no required user interaction. The issue...

CVE-2023-20979

CVE-2023-20979 corresponds to a buffer/read out-of-bounds issue in GetNextSourceDataPacket() of bta_av_co.cc on Android 13. The underlying cause is a missing bounds check, enabling local information disclosure with no user interaction and no extra privileges. In practice, exploits are not detaile...

CVE-2023-21050

CVE-2023-21050 describes a vulnerability in the Android kernel: in load_png_image of ExynosHWCHelper.cpp there is a possible out-of-bounds write due to improper input validation. This can lead to local escalation of privilege with System execution privileges required; no user interaction is neede...

CVE-2023-21071

The CVE-2023-21071 entry affects the Android kernel, specifically the dhd_prot_ioctcmplt_process function in dhd_msgbuf.c. The issue is an out-of-bounds write caused by improper input validation, enabling local escalation of privilege with System execution privileges required. User interaction is...

CVE-2023-21072

CVE-2023-21072 : The vulnerability affects the Android kernel in the function dhd_rtt.c::rtt_unpack_xtlv_cbfn, where a buffer overflow can cause an out-of-bounds write. This could enable local escalation of privilege to System level. Documents consistently describe the issue as a local exploit pa...

CVE-2023-21150

CVE-2023-21150 affects the Android kernel, specifically the function handle_set_parameters_ctrl in hal_socket.c. The vulnerability is an out-of-bounds read caused by an incorrect bounds check, leading to potential local information disclosure with System privileges required. No exploitation detai...

CVE-2023-21183

The CVE-2023-21183 entry affects Android 13, describing a logic error in ForegroundUtils/ForegroundUtils.java that enables reading NFC tag data while an app is in the background. This could lead to local privilege escalation without additional execution privileges and without required user intera...

CVE-2023-21198

CVE-2023-21198 affects Android 13 via the Bluetooth SDP server (btif_sdp_server.cc) in remove_sdp_record, where a missing bounds check enables an out-of-bounds read and local information disclosure. Exploitation is described as requiring no user interaction; no exploit specifics or exploitation s...

CVE-2023-21206

CVE-2023-21206 affects Android 13 devices, involving the function initiateVenueUrlAnqpQueryInternal in sta_iface.cpp. The issue is an out-of-bounds read caused by unsafe deserialization, leading to potential local information disclosure with system-level privileges required. Exploitation is descr...

CVE-2023-21213

CVE-2023-21213 affects Android-13 (sta_iface.cpp, initiateTdlsTeardownInternal): a missing bounds check leads to an out-of-bounds read in the wifi server, enabling local information disclosure with System privileges and no user interaction required. Multiple connected sources reiter the same root...