CVE-2023-21158

CVE-2023-21158 is an Android kernel issue in the encode function of miscdata.cpp where a heap buffer overflow can cause an out-of-bounds read. The described impact is local information disclosure with system privileges required (no user interaction needed). Public exploitation details are not pro...

CVE-2023-21198

CVE-2023-21198 affects Android 13 via the Bluetooth SDP server (btif_sdp_server.cc) in remove_sdp_record, where a missing bounds check enables an out-of-bounds read and local information disclosure. Exploitation is described as requiring no user interaction; no exploit specifics or exploitation s...

CVE-2023-21226

CVE-2023-21226 affects the Android kernel, specifically SAEMM_RetrieveTaiList in SAEMM_ContextManagement.c. The issue is an out-of-bounds read caused by an incorrect bounds check, which could enable remote information disclosure with no additional execution privileges and without user interaction...

CVE-2023-21247

CVE-2023-21247 affects Android’s BluetoothScanningMainSwitchPreferenceController.java, specifically the getAvailabilityStatus method. The issue is a missing permission check that could allow local elevation of privilege, requiring no additional execution privileges and with no user interaction re...

CVE-2023-35649

The CVE-2023-35649 issue concerns Exynos modem firmware: multiple functions in Exynos modem files allow an out-of-bounds write due to a missing bounds check. This could enable remote code execution with system-level privileges and does not require user interaction. The description and connected r...

CVE-2023-35653

CVE-2023-35653 affects Google Pixel devices in the ImsService component. The issue is an information-disclosure via a permissions bypass that could allow access to location information; exploitation is feasible with local access and requires System-level privileges with no user interaction. The P...

CVE-2023-44216

The CVE-2023-44216 entry concerns PVRIC (PowerVR Image Compression) on Imagination 2018+ GPU devices. The vulnerability stems from software-transparent compression that enables cross-origin pixel-stealing attacks against SVG Filter functions like feTurbulence and feBlend (GPU.zip issue). Affected...

CVE-2023-48404

CVE-2023-48404 affects Google Pixel Exynos RIL components, caused by a missing bounds check in ProtocolMiscCarrierConfigSimInfoIndAdapter (protocolmiscadapter.cpp). This leads to an out-of-bounds read and potential information disclosure without extra privileges or user interaction. Public refere...

CVE-2024-20045

CVE-2024-20045 concerns MediaTek devices where an incorrect calculation of audio buffer size enables an out-of-bounds read. This vulnerability could lead to local information disclosure with system privileges required; exploitation does not require user interaction. The patch referenced is ALPS08...

CVE-2024-27231

The provided connected documents confirm a concrete vulnerability: in function tmu_get_tr_stats() of tmu.c there is a missing bounds check causing an out-of-bounds read, enabling local information disclosure with no additional privileges or user interaction required. Affected software/versions ar...

CVE-2024-29787

In CVE-2024-29787, the issue is in the lwis_process_transactions_in_queue function of lwis_transaction.c. It describes a use-after-free vulnerability that could enable local escalation of privilege without requiring additional execution privileges, and exploitation does not require user interacti...

CVE-2024-47016

CVE-2024-47016 affects Google Pixel devices in the ACPM component. The vulnerability arises from an insecure default value, enabling local privilege escalation with no additional execution privileges or user interaction required. The impact is described as local escalation to a higher privilege l...

CVE-2024-53833

CVE-2024-53833 is reported in the Android LWIS stack, specifically in the function prepare_response_locked within lwis_transaction.c . The vulnerability stems from improper input validation, enabling a possible out-of-bounds write. Impact described as local escalation of privilege with no additio...

CVE-2024-53837

CVE-2024-53837 describes a vulnerability in the Android LWIS component (lwis_periodic_io.c) where an integer overflow can trigger an out-of-bounds write during prepare_response. This leads to local elevation of privilege with no user interaction. The issue is documented across multiple feeds (NVD...

CVE-2025-26417

CVE-2025-26417 affects the Android framework via the function in DownloadProvider.java, where a bypass of user consent in shared storage could occur due to a confusing deputy. This may enable local information disclosure without requiring additional execution privileges, and does not require user...

CVE-2013-5933

The CVE-2013-5933 entry describes a stack-based buffer overflow in the sub_E110 function of init on Android 2.3.7 running on the Motorola Defy XT (Republic Wireless configuration). The vulnerability arises when a long string is written to the /dev/socket/init_runit LocalSocket, in a way inconsist...

CVE-2015-5568

CVE-2015-5568 affects Adobe Flash Player and related AIR components. Public docs confirm this vulnerability is part of the APSB15-23 set and is tied to a vector-length corruption that could enable a denial of service or other impact. Affected software and versions per the sources include: Windows...

CVE-2017-0390

CVE-2017-0390 affects the Mediaserver Tremolo/dpen.s component in Android. A denial-of-service vulnerability could allow a remote attacker to cause a device hang or reboot by processing a specially crafted file. Affected products/versions span Android 4.4.4 through 7.1.1 (Android IDs include A-31...

CVE-2017-13260

CVE-2017-13260 is an information disclosure flaw in Android Bluetooth’s BNEP implementation. In bnep_data_ind of bnep_main.cc, a missing bounds check enables a possible out-of-bounds read, allowing remote disclosure without user interaction. Affected Android versions include 5.1.1, 6.0, 6.0.1, 7....

CVE-2017-8244

CVE-2017-8244 affects Android CAF builds leveraging the Linux kernel. The vulnerability arises in core_info_read and inst_info_read where the buffer structures dbg_buf, dbg_buf->curr, and dbg_buf->filled_size can be concurrently modified by multiple threads without mutexes/locks. This race ...

CVE-2018-9354

CVE-2018-9354 is a vulnerability in the Android VideoFrameScheduler component: in VideoFrameScheduler.cpp, PLL::fit can trigger a divide-by-zero error leading to a remote denial of service. Multiple connected records confirm the affected area but do not provide concrete patch/version details or a...

CVE-2019-2104

CVE-2019-2104 affects the Android Framework component (HIDL/safe_union and related C++ structs/unions) used when sending data to application processes. The issue exposes uninitialized fields, enabling local information disclosure without user interaction. The vulnerability is scoped to Android 8....

CVE-2020-0187

CVE-2020-0187 affects Android 10 where in engineSetMode of BaseBlockCipher.java a comparison error could permit information disclosure without extra privileges. Documents confirm the vulnerability type as information disclosure with local access required, and no user interaction. Public reference...

CVE-2020-10855

CVE-2020-10855 affects Samsung mobile devices running Android P (9.0). The vulnerability allows bypass of Factory Reset Protection (FRP) via AppTray, as described in multiple sources (Samsung FRP reference SVE-2019-16192). The core issue is FRP bypass through AppTray on Samsung firmware identifie...

CVE-2021-0552

CVE-2021-0552 affects Android on Android-11 via the MediaOutputSlice.java getEndItemSliceAction path. The root cause is an unsafe PendingIntent that enables a permission bypass, leading to potential information disclosure with local attack practicality. The vulnerability is categorized as an info...

CVE-2021-0566

CVE-2021-0566 affects Android 11, specifically in accessAudioHalPidscpp within TimeCheck.cpp. The issue is an out-of-bounds read due to missing bounds checks, leading to potential local information disclosure with system privileges required. No user interaction is needed for exploitation, and exp...

CVE-2021-0607

CVE-2021-0607 affects the Android kernel in the Knowles IAXXX adnc driver. The issue is in iaxxx_calc_i2s_div (iaxxx-codec.c) where a missing bounds check on a hardware port write allows an attacker with local access to supply data that leads to local elevation of privilege. Exploitation requires...

CVE-2021-0940

CVE-2021-0940 concerns the Android kernel with a vulnerability described as an out-of-bounds write due to improper locking. The issue could enable local escalation of privilege to System execution privileges without user interaction, affecting Android kernel components. Concrete exploit details, ...

CVE-2021-1032

CVE-2021-1032 affects Android 12 and is tied to getMimeGroup in PackageManagerService.java. The issue enables a side-channel disclosure that can reveal whether an app is installed without any query permissions, constituting a local information disclosure. Exploitation requires no user interaction...

CVE-2021-25363

Summary: CVE-2021-25363 describes an improper access control in Samsung’s ActivityManagerService prior to the SMR APR-2021 Release 1, enabling untrusted applications to access running processes and delete local files. Affected scope (from provided sources): Samsung SMR (system patch package) prio...

CVE-2021-39684

CVE-2021-39684 relates to the Android kernel component gs101/abl/target/slider/target.c, where a logic error can cause allocation of RWX memory. This may enable local privilege escalation with no extra execution privileges or user interaction required. Connected OSV data confirms the issue but do...

CVE-2021-39764

CVE-2021-39764 is documented in Android 12L release notes as a Framework Elevation of Privilege (EoP) vulnerability with moderate severity. The entry specifies an improper input validation issue in Settings that can display an incorrect app name, enabling local privilege escalation via app spoofi...

CVE-2021-39776

The Android 12L release notes list CVE-2021-39776 under the System category with Type EoP and High severity, indicating an elevation-of-privilege issue. The notes do not provide explicit technical details, affected subcomponents beyond class, or exploit vectors. Affected product/version is Androi...

CVE-2021-39782

The CVE-2021-39782 issue affects Android 12L Telephony, enabling a local elevation of privilege via unauthorized modification of the PLMN SIM file due to a missing permission check. Exploitation is described as local with no user interaction; the Android 12L security release notes indicate mitiga...

CVE-2022-20044

CVE-2022-20044 involves a use-after-free in Bluetooth that can crash the Bluetooth service and enable local escalation of privilege without user interaction. Exploitation is local with low privileges required and LOW attack complexity; the vulnerability impacts confidentiality, integrity, and ava...

CVE-2022-20094

CVE-2022-20094 affects imgsensor with an out-of-bounds write caused by an incorrect bounds check. The vulnerability enables local privilege escalation with System execution privileges required; exploitation does not require user interaction. The issue is mitigated by patch ALPS06479763 (Issue ALP...

CVE-2022-20505

CVE-2022-20505 affects Android 13. In CallLogProvider.java openFile, a path traversal bug can bypass permissions, enabling local escalation of privilege with User privileges and no user interaction required. The vulnerability is described as a permission bypass due to a path traversal error, with...

CVE-2022-20540

CVE-2022-20540 is a local-use-after-free vulnerability in Android’s SurfaceFlinger::doDump. Exploitation could permit arbitrary code execution and local escalation of privilege without user interaction. Affected: Android 13, via SurfaceFlinger component. The issue is documented across multiple fe...

CVE-2022-20546

CVE-2022-20546 affects Android 13 in the code path described by the Pixel/Effect.cpp vulnerability: a missing bounds check in the function getCurrentConfigImpl can cause an out-of-bounds write. This vulnerability is characterized as a local escalation of privilege with system execution privileges...

CVE-2022-20597

CVE-2022-20597 describes a local Elevation of Privilege in the Android kernel: in ppmpu_set of ppmpu.c, an integer overflow can lead to a local escalation of privilege with no extra execution privileges and no user interaction required. Public sources in NVD/Red Hat entries corroborate the Androi...

CVE-2022-21780

CVE-2022-21780 affects the MediaTek WLAN driver. It is an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation with SYSTEM execution privileges required and no user interaction. CVSSv3.1: 6.7 (LOCAL, HIGH impact on Confidentiality/Integrity/Availability; HIGH ...

CVE-2022-22264

CVE-2022-22264 affects Samsung Mobile DressRoom: improper sanitization of the Incoming Intent in Dressroom allows a local attacker to read and write arbitrary files without permission. The issue is rooted in insufficient input validation in the Dressroom component before the SMR Jan‑2022 Release ...

CVE-2022-25832

CVE-2022-25832 concerns an improper authentication vulnerability in the Samsung S Secure component prior to SMR Apr-2022 Release 1, enabling physical attackers to access the locked Myfiles app without authentication. Affected product/variant: S Secure with Myfiles lock mechanism prior to the spec...

CVE-2022-26092

CVE-2022-26092 : Affected component is the Quram Agif library before Samsung SMR Apr-2022 Release 1. Description: improper boundary check leads to arbitrary code execution (buffer overflow). Impact is high (local, requires low privileges, no user interaction). Connected sources indicate a Samsung...

CVE-2022-27571

CVE-2022-27571 describes a heap-based buffer overflow in the function sheifd_get_info_image of the libsimba library, prior to the Samsung SMR Apr-2022 Release 1. This vulnerability could enable remote code execution without user interaction, with network access as the attack vector. The CVSS data...

CVE-2022-32642

The CVE-2022-32642 issue affects the ccd component, where a race condition can cause memory corruption. This could enable local escalation of privilege with System execution privileges required and no user interaction is needed. The problem is documented across multiple sources with patch referen...

CVE-2022-33714

CVE-2022-33714 affects Samsung devices’ SemWifiApBroadcastReceiver prior to the SMR Aug-2022 Release 1. The issue is described as an improper access control that allows an attacker to reset a setting value related to the mobile hotspot. Publicly stated impact is limited to local access scenarios;...

CVE-2022-33720

CVE-2022-33720 concerns Samsung AppLock. The vulnerability is an improper authentication issue in AppLock prior to SMR Aug-2022 Release 1, which could let a physical attacker bypass the lock and access Chrome secured by AppLock via a new tap shortcut. Affected component: AppLock’s Chrome access c...

CVE-2022-39908

CVE-2022-39908 affects Samsung decoding library used for video thumbnails on Samsung Mobile devices prior to SMR Dec-2022 Release 1. The root cause is a TOCTOU condition enabling a local attacker to perform an Out-Of-Bounds Write. Affected component: Samsung decoding library for video thumbnails;...

CVE-2022-42511

CVE-2022-42511 affects EmbmsSessionData::encode in embmsdata.cpp. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privileges with System execution privileges required. User interaction is not needed. The available documents consistently describe ...