CVE-2023-21226

CVE-2023-21226 affects the Android kernel, specifically SAEMM_RetrieveTaiList in SAEMM_ContextManagement.c. The issue is an out-of-bounds read caused by an incorrect bounds check, which could enable remote information disclosure with no additional execution privileges and without user interaction...

CVE-2023-21387

The CVE-2023-21387 entry concerns Google Android’s User Backup Manager. The connected documents describe a token leakage via log information disclosure that can bypass user confirmation for backups, leading to local information disclosure with System execution privileges potentially required. Thi...

CVE-2023-21399

CVE-2023-21399 affects Google Pixel devices (Pixel bulletin: GSC component) and is described as a logic-error–driven bypass of cryptographic guarantees that enables local privilege escalation with no user interaction. Impact: Elevation of Privilege, Local; exploitability is listed as high with lo...

CVE-2023-40142

CVE-2023-40142 is documented in multiple sources as a local elevation-of-privilege affecting Google Pixel components, stemming from a logic error in the code that bypasses carrier restrictions on the device. The Android Pixel bulletins and Red Hat/NVD records describe the issue as enabling local ...

CVE-2024-20033

A security vulnerability exists in MediaTek chips due to a missing bounds check in the nvram module. This flaw could lead to local information disclosure if exploited by an attacker with System execution privileges . No user interaction is required for exploitation. Remediation is tracked under P...

CVE-2024-20045

A security vulnerability exists in the audio module of MediaTek chips due to an incorrect buffer size calculation. This flaw allows for a possible out-of-bounds read , which could result in local information disclosure . Exploitation requires System execution privileges and does not require user ...

CVE-2024-20147

A security vulnerability exists in the Bluetooth FW microprogramming software of MediaTek chipsets. The flaw originates from improper exception handling , which can lead to a reachable assertion . Exploiting this vulnerability allows a remote attacker to cause a denial of service (DoS) without re...

CVE-2024-47013

A security vulnerability exists in the flexpmu component, specifically within the pmucal_rae_handle_seq_int function of flexpmu_cal_rae.c . The flaw is caused by uninitialized data , which could allow for an arbitrary write . This vulnerability could lead to a local escalation of privilege (EoP) ...

CVE-2024-47025

The CVE-2024-47025 issue is a local information-disclosure in the function ppmp_protect_buf of drm_fw.c. The underlying logic error could allow disclosure of sensitive data without extra privileges, with no user interaction required. Pixel/Android bulletins indicate affected devices can be patche...

CVE-2024-47028

CVE-2024-47028 affects Google Pixel devices, tied to the ffu.c implementation: the function ffu_flash_pack may overflow an integer, causing an out-of-bounds read. This could enable local information disclosure with system privileges required; exploitation is reported to require no user interactio...

CVE-2024-56185

The Exynos RIL component in Google Pixel devices is vulnerable to an out-of-bounds read within the ProtocolUnsolOnSSAdapter::GetServiceClass() function of protocolcalladapter.cpp. This flaw is caused by a missing bounds check and can lead to local information disclosure . Exploitation of this vul...

CVE-2025-20694

The Bluetooth driver's firmware microprogramming software on MediaTek chips is vulnerable to a buffer underwrite (violation of the buffer's initial boundary) caused by an uncaught exception . This flaw allows a remote attacker to cause a system crash , resulting in a denial of service without req...

CVE-2026-0055

CVE-2026-0055 describes a path traversal in PackageInstallerService.java (createSessionInternal) that could let an attacker place or move a Device Policy Controller (DPC) into an invalid directory, enabling local privilege escalation without extra execution privileges or user interaction. The det...

CVE-2011-3901

CVE-2011-3901 affects Android's SQLite journal handling. The vulnerability arises because the journal file of SQLite databases in the Android data directory can be read by all applications, due to permissions on the data directory (/data/data//databases) and the journal itself. Impacted versions ...

CVE-2014-7911

CVE-2014-7911 affects Android's deserialization path in ObjectInputStream (Android before 5.0.0). The vulnerability allows an attacker to achieve arbitrary code execution via a crafted serialized object, invoked through an ArrayMap Parcel inside an intent to system_service, demonstrated by the fi...

CVE-2015-5581

CVE-2015-5581 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote arbitrary-code execution. Affected: Flash Player on Windows, OS X (before 18.0.0.241; before 19.0.0.185 for 19.x), Linux (before 11.2.202.521); Adobe AIR before 19.0.0.190; AIR SD...

CVE-2015-6575

Technical details for CVE-2015-6575 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2017-0541

CVE-2017-0541 is a remote code execution vulnerability in Android’s Mediaserver (sonivox) that can be triggered by processing a specially crafted media file, causing memory corruption within Mediaserver. Affected Android versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1; Android ID A-34031018...

CVE-2017-13258

CVE-2017-13258 affects Android Bluetooth BNEP: a missing bounds check in bnep_data_ind() within bnep_main.cc can trigger an out-of-bounds read, enabling remote information disclosure without user interaction. Affected Android versions include 5.1.1, 6.0/6.0.1, 7.0, 7.1.1/7.1.2, 8.0, and 8.1 (Andr...

CVE-2018-9449

The CVE-2018-9449 entry concerns Google Pixel/Nexus Android devices. The vulnerability is in the SDP discovery path, specifically the function process_service_search_attr_rsp in sdp_discovery.cc, where a missing bounds check can cause an out-of-bounds read. This leads to local information disclos...

CVE-2019-2205

CVE-2019-2205 affects Android 8.0–10 and is caused by a use-after-free in ProxyResolverV8::SetPacScript (proxy_resolver_v8.cc), leading to memory corruption and remote code execution without user interaction. Exploitation is network-based (no privileges required) with high impact on confidentiali...

CVE-2019-9346

CVE-2019-9346 affects the Android Media Framework (libstagefright). The issue is a heap buffer overflow causing an out-of-bounds write, enabling remote code execution. Exploitation requires user interaction. Affected product/version: Android 10. Root cause: out-of-bounds write in a heap-allocated...

CVE-2020-0047

CVE-2020-0047 affects Android 10; a missing permission check in AudioService.java (setMasterMute) allows local silencing of audio without extra execution privileges or user interaction. The issue is documented as Elevation of Privilege with likely impact limited to audio control. Public reference...

CVE-2020-10855

CVE-2020-10855 affects Samsung mobile devices running Android P (9.0). The vulnerability allows bypass of Factory Reset Protection (FRP) via AppTray, as described in multiple sources (Samsung FRP reference SVE-2019-16192). The core issue is FRP bypass through AppTray on Samsung firmware identifie...

CVE-2020-27066

CVE-2020-27066 involves a use-after-free in the Linux kernel’s xfrm6_tunnel_free_spi (net/ipv6/xfrm6_tunnel.c) caused by improper locking, enabling local privilege escalation with system execution privileges required and no user interaction. Affected context from connected docs includes Android k...

CVE-2020-35550

The CVE-2020-35550 entry describes a vulnerability affecting Samsung mobile devices running O(8.x), P(9.0), Q(10.0), and R(11.0) software, where attackers can bypass Factory Reset Protection (FRP) via the StatusBar. This entry is linked to Samsung’s internal ID SVE-2020-17888 (December 2020). No ...

CVE-2021-0566

CVE-2021-0566 affects Android 11, specifically in accessAudioHalPidscpp within TimeCheck.cpp. The issue is an out-of-bounds read due to missing bounds checks, leading to potential local information disclosure with system privileges required. No user interaction is needed for exploitation, and exp...

CVE-2021-25336

CVE-2021-25336 affects Samsung mobile devices via improper access control in NotificationManagerService. The root cause is insufficient access checks that allow untrusted applications to obtain notification access by sending a crafted malicious intent. Documented impact is limited to exploitation...

CVE-2021-39755

CVE-2021-39755 is a framework issue in Android 12L related to DevicePolicyManager that allows local information disclosure: an attacker could reveal the existence of an installed package without proper query permissions, with no user interaction. The Android 12L security release notes attribute t...

CVE-2022-20044

CVE-2022-20044 involves a use-after-free in Bluetooth that can crash the Bluetooth service and enable local escalation of privilege without user interaction. Exploitation is local with low privileges required and LOW attack complexity; the vulnerability impacts confidentiality, integrity, and ava...

CVE-2022-20544

CVE-2022-20544 affects Android 13; a missing permission check in onOptionsItemSelected of ManageApplications.java could bypass profile owner restrictions, enabling local elevation of privilege without additional execution privileges or user interaction. The issue is documented across multiple sou...

CVE-2022-20554

CVE-2022-20554 affects Android 13 in Pixel devices. The vulnerability arises from an out-of-bounds read caused by a use-after-free in the function removeEventHubDevice within InputDevice.cpp. This leads to local elevation of privilege with System execution privileges required, and exploitation do...

CVE-2022-26092

CVE-2022-26092 : Affected component is the Quram Agif library before Samsung SMR Apr-2022 Release 1. Description: improper boundary check leads to arbitrary code execution (buffer overflow). Impact is high (local, requires low privileges, no user interaction). Connected sources indicate a Samsung...

CVE-2022-26096

CVE-2022-26096 describes a null pointer dereference in the parser_ispe function of the libsimba library prior to Samsung SMR Apr-2022 Release 1. The flaw permits a remote attacker to cause an out-of-bounds write. Connected documents consistently identify the affected component as libsimba and the...

CVE-2022-27571

CVE-2022-27571 describes a heap-based buffer overflow in the function sheifd_get_info_image of the libsimba library, prior to the Samsung SMR Apr-2022 Release 1. This vulnerability could enable remote code execution without user interaction, with network access as the attack vector. The CVSS data...

CVE-2022-32595

CVE-2022-32595 affects Widevine with an out-of-bounds read caused by an incorrect bounds check. This vulnerability could lead to local information disclosure; the impact is described as high for confidentiality, with system-level execution privileges needed and no user interaction required. The a...

CVE-2022-33720

CVE-2022-33720 concerns Samsung AppLock. The vulnerability is an improper authentication issue in AppLock prior to SMR Aug-2022 Release 1, which could let a physical attacker bypass the lock and access Chrome secured by AppLock via a new tap shortcut. Affected component: AppLock’s Chrome access c...

CVE-2022-38681

CVE-2022-38681 involves a vulnerability in the WLAN driver where a missing parameter check in the driver may allow a local attacker to trigger a denial of service in WLAN services. The available documents identify the affected component as the WLAN driver and cite a local denial of service as the...

CVE-2022-39908

CVE-2022-39908 affects Samsung decoding library used for video thumbnails on Samsung Mobile devices prior to SMR Dec-2022 Release 1. The root cause is a TOCTOU condition enabling a local attacker to perform an Out-Of-Bounds Write. Affected component: Samsung decoding library for video thumbnails;...

CVE-2022-39913

CVE-2022-39913 concerns the Exposure of Sensitive Information to an Unauthorized Actor in Samsung’s Persona Manager prior to Android T(13). The issue arises from a data exposure that allows a local attacker to access user profiles information. Affected product/area: Persona Manager on devices run...

CVE-2022-39914

The CVE-2022-39914 entry describes an information-disclosure vulnerability in Samsung DisplayManagerService prior to Android T (13). A local attacker could access information about connected DLNA devices due to exposure of sensitive data by DisplayManagerService. The available sources indicate th...

CVE-2023-20827

CVE-2023-20827 affects the ims service, where a race condition can cause memory corruption leading to local privilege escalation with SYSTEM rights. Exploitation does not require user interaction, and a patch is identified (ALPS07937105). The available sources consistently describe the issue as a...

CVE-2023-20845

CVE-2023-20845 affects imgsys. The vulnerability is an out-of-bounds read caused by missing valid range checking, leading to local information disclosure with system execution privileges required and user interaction for exploitation. Patch ID ALPS07197795 / Issue ID ALPS07340357 is associated wi...

CVE-2023-21033

CVE-2023-21033 is a DoS vulnerability affecting Android 13 where the issue resides in WifiManager.addNetwork. The root cause is a resource-exhaustion condition that can trigger a persistent DoS without requiring additional privileges or user interaction, and it is local in scope. Documented detai...

CVE-2023-21076

CVE-2023-21076 involves a possible out-of-bounds write due to a heap buffer overflow in the function createTransmitFollowupRequest within nan.cpp. The underlying issue is a heap buffer overflow that could enable a local escalation of privilege with System execution privileges required. Exploitati...

CVE-2023-21125

Google Android is subject to an elevation of privilege vulnerability caused by a use after free in the btif_hh_hsdata_rpt_copy_cb function within bta_hh.cc. An attacker can exploit this memory corruption to gain higher privileges over Bluetooth locally. The vulnerability does not require addition...

CVE-2023-21198

CVE-2023-21198 affects Android 13 via the Bluetooth SDP server (btif_sdp_server.cc) in remove_sdp_record, where a missing bounds check enables an out-of-bounds read and local information disclosure. Exploitation is described as requiring no user interaction; no exploit specifics or exploitation s...

CVE-2023-21220

Technical details about CVE-2023-21220 are not publicly provided in the supplied documents. Information about affected components, root cause, and fixes is not disclosed here. Monitor for updates.

CVE-2023-21223

CVE-2023-21223 affects Android kernel via an out-of-bounds read in LPP_ConvertGNSS_DataBitAssistance (LPP_CommonUtil.c) caused by a missing bounds check. This enables remote information disclosure with no privileges or user interaction required. Impact and exploitability are described in multiple...

CVE-2023-21294

CVE-2023-21294 concerns Android’s Slice component, where a missing permission check enables local information disclosure by exposing installed packages. The exploit requires no user interaction and does not require additional privileges. The connected sources reiterate the same description but do...