CVE-2024-32916

In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-56185

CVE-2024-56185 involves a missing bounds check in ProtocolUnsolOnSSAdapter::GetServiceClass() within protocolcalladapter.cpp, causing an out-of-bounds read that can lead to local information disclosure. The impact is described as requiring baseband firmware compromise with no user interaction. Pu...

CVE-2023-32880

CVE-2023-32880 concerns the battery module with a missing bounds check that can cause local information disclosure (high confidentiality impact) and requires local access and high privileges; no user interaction is needed. A patch is available (Patch ID: ALPS08308070; Issue ID: ALPS08308076). No ...

CVE-2024-39439

The CVE-2024-39439 entry affects the DRM service and is caused by a missing bounds check that enables an out-of-bounds write. Reported impact is local denial of service with System execution privileges required; no exploitation details are provided in the connected documents. Affected software ve...

CVE-2024-47013

CVE-2024-47013 is described across multiple sources as a flaw in the PMU firmware path (pmucal_rae_handle_seq_int in flexpmu_cal_rae.c) where uninitialized data allows an arbitrary write, enabling local privilege escalation with no user interaction. Documents consistently note the issue affects P...

CVE-2024-47018

CVE-2024-47018 affects Google's Pixel platform; the flaw is in pmucal_rae_handle_seq_int within flexpmu_cal_rae.c. The vulnerability is an out-of-bounds read caused by a buffer overflow, enabling local information disclosure without additional execution privileges and without user interaction. Th...

CVE-2024-53840

Technical details such as affected product, versions, and fix are not provided in the supplied documents; the CVE is described as a biometric bypass with local privilege escalation, but no specifics on vulnerable components are given. Monitor for updates.

CVE-2026-0075

The CVE-2026-0075 entry describes a SQL injection that could permit access to the contacts database, enabling local escalation of privilege with no additional privileges required and no user interaction needed. Connected documents (including RH/CVE, EUVD, NVD, CNNVD, and others) reiterate the sam...

CVE-2014-7911

CVE-2014-7911 affects Android's deserialization path in ObjectInputStream (Android before 5.0.0). The vulnerability allows an attacker to achieve arbitrary code execution via a crafted serialized object, invoked through an ArrayMap Parcel inside an intent to system_service, demonstrated by the fi...

CVE-2015-6647

CVE-2015-6647 is a privilege-escalation in the Widevine QSEE TrustZone app on Android. A crafted app exploiting QSEECOM access could grant elevated privileges on devices running Android 5.x before 5.1.1 LMY49F and Android 6.0 before 2016-01-01. Mitigation/fixes are provided by Android patches: An...

CVE-2017-0411

CVE-2017-0411 is an elevation-of-privilege vulnerability in the Android Framework APIs that could let a local malicious application execute arbitrary code within a privileged process. Affected product: Android (Framework APIs). Vulnerable versions (per initial entry): Android 7.0 and 7.1.1 (Andro...

CVE-2017-0475

Technical details about CVE-2017-0475 are not publicly provided in the supplied documents. Monitor for updates from Android security bulletins and vendor advisories.

CVE-2017-13258

CVE-2017-13258 affects Android Bluetooth BNEP: a missing bounds check in bnep_data_ind() within bnep_main.cc can trigger an out-of-bounds read, enabling remote information disclosure without user interaction. Affected Android versions include 5.1.1, 6.0/6.0.1, 7.0, 7.1.1/7.1.2, 8.0, and 8.1 (Andr...

CVE-2017-13262

CVE-2017-13262 is an Android Bluetooth vulnerability in the BNEP path (bnep_data_ind in bnep_main.cc) where a missing length decrement causes an out-of-bounds read. This can enable remote information disclosure without user interaction. Affected Android versions include 5.1.1 through 8.1. Public ...

CVE-2018-9478

CVE-2018-9478 involves an out-of-bounds write in the sdp_server.cc file, specifically in process_service_attr_req and process_service_search_attr_req, caused by a missing bounds check. The vulnerability could allow remote code execution with no privileges and without user interaction, as describe...

CVE-2019-2000

CVE-2019-2000 is a local elevation-of-privilege vulnerability in the Android kernel Binder driver (binder.c) caused by a use-after-free in binder-related paths. Affected: Android kernel Binder driver (binder.c). Impact: memory corruption enabling local privilege escalation without user interactio...

CVE-2020-0047

CVE-2020-0047 affects Android 10; a missing permission check in AudioService.java (setMasterMute) allows local silencing of audio without extra execution privileges or user interaction. The issue is documented as Elevation of Privilege with likely impact limited to audio control. Public reference...

CVE-2020-0053

The CVE-2020-0053 issue affects Android 10, specifically in hidl_struct_util.cpp within convertHidlNanDataPathInitiatorRequestToLegacy and convertHidlNanDataPathIndicationResponseToLegacy. It describes a possible out-of-bounds write due to a missing bounds check, enabling local escalation of priv...

CVE-2021-0608

The CVE-2021-0608 entry concerns Android’s AppLaunchActivity.handleAppLaunch, with a local elevation-of-privilege via a confused deputy. Affected component: Pixel Launcher on Pixel devices (and related Android kernel/framework context as per mappings). Root cause: improper handling in AppLaunchAc...

CVE-2021-1002

CVE-2021-1002 affects Android 12 and is detailed in multiple sources as a vulnerability in WT_Interpolate within eas_wtengine.c, caused by a missing bounds check that allows an out-of-bounds read. This can lead to remote information disclosure without extra execution privileges and without user i...

CVE-2021-39655

CVE-2021-39655 is listed in Pixel bulletin as an Elevation of Privilege in the Android kernel (Kernel component) affecting Pixel devices, with a high-severity CVSS in NVD (Critical in 3.1). The connected Pixel bulletin entry confirms the issue is categorized under Kernel with EoP impact, but the ...

CVE-2021-39678

CVE-2021-39678 is described in connected sources as a vulnerability in the Android kernel allowing a bypass of Factory Reset Protection that could lead to local privilege escalation with no user interaction. The NVD entry lists impact as local, with base scores indicating high severity (CVSSv3.1:...

CVE-2021-39753

The CVE-2021-39753 issue affects Android 12L, involving DomainVerificationService where a missing permission check allows local information disclosure without extra privileges. This is a framework-level information leak (no user interaction required) with a local attack surface. The Android 12L s...

CVE-2022-20181

The provided connected Pixel bulletin (Android security bulletin) confirms CVE-2022-20181 is a Denial-of-Service (DoS) vulnerability affecting the Android Modem component. The entry does not provide exploit details. The bulletin indicates that applying security patches at patch level 2022-06-05 o...

CVE-2022-20367

CVE-2022-20367 affects the Android kernel; the vulnerability is in the construct_transaction function of lwis_ioctl.c, where an integer overflow can cause an out-of-bounds write, enabling local privilege escalation with system execution privileges required and no user interaction. The issue is id...

CVE-2022-20523

CVE-2022-20523 concerns Android 13 and targets a vulnerability in the IncFs_GetFilledRangesStartingFrom function (incfs.cpp). The issue is a potential out-of-bounds read caused by a missing bounds check, which could lead to local information disclosure without requiring additional execution privi...

CVE-2022-20552

CVE-2022-20552 affects Android, with the vulnerability in the btif_a2dp_sink_command_ready function of btif_a2dp_sink.cc. The issue is an out-of-bounds read caused by a use-after-free, leading to local information disclosure without extra execution privileges. Exploitation is described as local a...

CVE-2022-21762

CVE-2022-21762 affects the apusys driver, where an integer overflow can trigger a system crash. The vulnerability enables local denial of service with System execution privileges and does not require user interaction. Affected component is the apusys driver; root cause is integer overflow leading...

CVE-2022-21782

CVE-2022-21782 affects the MediaTek WLAN driver. The root cause is a missing bounds check leading to an out-of-bounds write, enabling local privilege escalation to SYSTEM with no user interaction required. A patch is available (ALPS06704526; ALPS06704508). Exploitation details are not provided in...

CVE-2022-26467

CVE-2022-26467 affects the rpmb component in MediaTek chips. An out-of-bounds write caused by an incorrect bounds check could enable local privilege escalation to SYSTEM with no user interaction required. The advisory references patch ALPS07167738 (Issue ALPS07167738) as a fix. Exploitation statu...

CVE-2022-27826

Technical details about CVE-2022-27826 are not publicly provided in the connected documents; monitor for updates.

CVE-2022-30709

CVE-2022-30709 describes an improper input validation logic vulnerability in Samsung SECRIL prior to Jun-2022 Release 1 that can cause a crash. Affected component: SECRIL on Samsung mobile devices. Root cause: fault in input validation logic (no details provided beyond the description). Impact as...

CVE-2022-30715

The CVE-2022-30715 issue affects DofViewer prior to the SMR Jun-2022 Release 1, described as an improper access control vulnerability that allows an attacker to control the floating system alert window. Root cause: insufficient access control in DofViewer. Impact: attacker-controlled floating ale...

CVE-2023-20712

CVE-2023-20712 affects MediaTek WLAN code (wlan module) and is due to a missing bounds check, enabling an out-of-bounds write that can yield local privilege escalation to System level. Exploit requires LOCAL access with HIGH privileges and no user interaction. Patch: ALPS07796914 (Issue ALPS07796...

CVE-2023-20827

CVE-2023-20827 affects the ims service, where a race condition can cause memory corruption leading to local privilege escalation with SYSTEM rights. Exploitation does not require user interaction, and a patch is identified (ALPS07937105). The available sources consistently describe the issue as a...

CVE-2023-21002

CVE-2023-21002 affects Android 13 in the getAvailabilityStatus logic of Transcode Permission Controllers, where a missing permission check enables local elevation of privilege without user interaction. Impact is described as high (local, with high confidentiality/integrity/availability impact). C...

CVE-2023-21018

CVE-2023-21018 concerns Google Pixel/Android 13 where the UnwindingWorker in unwinding.cc can trigger an out-of-bounds write due to a use-after-free. This leads to local elevation of privilege with System execution privileges and does not require user interaction. The public descriptions consiste...

CVE-2023-21032

CVE-2023-21032 affects Android 13; the issue is in the function _ufdt_output_node_to_fdt of ufdt_convert.c, causing a possible out-of-bounds read via a heap buffer overflow. The impact is local information disclosure with System privileges required; exploitation does not require user interaction....

CVE-2023-21076

CVE-2023-21076 involves a possible out-of-bounds write due to a heap buffer overflow in the function createTransmitFollowupRequest within nan.cpp. The underlying issue is a heap buffer overflow that could enable a local escalation of privilege with System execution privileges required. Exploitati...

CVE-2023-21078

CVE-2023-21078 affects the Android kernel, with the flaw located in function dhd_rtt.c: rtt_unpack_xtlv_cbfn . It describes a possible out-of-bounds write caused by a buffer overflow, which could enable a local escalation of privilege with System privileges required. Exploitation is stated as loc...

CVE-2023-21125

CVE-2023-21125 affects Google Android Bluetooth stack: the function btif_hh_hsdata_rpt_copy_cb in bta_hh.cc suffers a memory corruption due to a use-after-free, enabling local privilege escalation over Bluetooth with no user interaction. The vulnerability is adjacent-network exploitable as per CV...

CVE-2023-21210

CVE-2023-21210 affects Android 13. The issue is an out-of-bounds read in the function initiateHs20IconQueryInternal within sta_iface.cpp, caused by improper input validation. Reported impact: local information disclosure with system-level execution privileges required; exploitation requires no us...

CVE-2023-21220

Technical details about CVE-2023-21220 are not publicly provided in the supplied documents. Information about affected components, root cause, and fixes is not disclosed here. Monitor for updates.

CVE-2023-21387

The CVE-2023-21387 entry concerns Google Android’s User Backup Manager. The connected documents describe a token leakage via log information disclosure that can bypass user confirmation for backups, leading to local information disclosure with System execution privileges potentially required. Thi...

CVE-2023-32830

CVE-2023-32830 concerns a vulnerability in TVAPI where a missing bounds check can cause an out-of-bounds write. The root cause is a bounds-check omission in TVAPI, enabling local escalation of privilege with System execution privileges required; no user interaction is needed. The impact is descri...

CVE-2023-35645

CVE-2023-35645 is listed in Google's Pixel update bulletin under the Edgetpu component with a memory-corruption trigger caused by a race condition, yielding local privilege escalation (System level) without user interaction. The Pixel bulletin indicates this issue is addressed by updating to the ...

CVE-2023-52345

The CVE-2023-52345 entry concerns a vulnerability in the modem driver where improper input validation can cause a system crash, potentially enabling local information disclosure with System execution privileges. Affected component: modem driver (details on vendor/product not explicitly enumerated...

CVE-2024-32917

In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-32920

CVE-2024-32920 describes an out-of-bounds read in set_secure_reg of sac_handler.c, caused by a missing bounds check. This can disclose 4 bytes of stack memory locally without extra privileges or user interaction. Affected software/components, root cause, and explicit remediation are not provided ...

CVE-2024-32922

In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation.