CVE-2017-0678

CVE-2017-0678 is a remote code execution vulnerability in Android's media framework affecting Android 7.0, 7.1.1 and 7.1.2. The issue appears in the 2017 July Android Security Bulletin under Media framework, with patches released via the July 2017 patch levels (2017-07-01 and 2017-07-05). No expl...

CVE-2017-0776

CVE-2017-0776 is an information-disclosure vulnerability in Android’s Media Framework affecting Android 7.0, 7.1.1, 7.1.2 and 8.0. Root-cause and exact exploit details are not provided in the connected documents; no mitigation/patch details are specified here. Monitor for official patches in Andr...

CVE-2020-0103

CVE-2020-0103 exploits a memory corruption in a2dp_aac_decoder_cleanup within a2dp_aac_decoder.cc, enabling remote code execution with no privileges or user interaction. Affected software per the initial data includes Android 9 and Android 10. The Android Security Bulletin notes this issue under ...

CVE-2020-0347

CVE-2020-0347 affects Android 11 with an out-of-bounds write in iptables caused by an incorrect bounds check. The vulnerability could allow local escalation to SYSTEM privileges without user interaction. Evidence in the initial document notes the affected product (Android 11) and the privilege le...

CVE-2021-0548

CVE-2021-0548 affects Android 11; the vulnerability is in rw_i93_send_to_lower (rw_i93.cc) where a missing bounds check can cause an out-of-bounds write, enabling local elevation of privilege with no user interaction. Affected component: Android kernel/userland path rw_i93_send_to_lower. No explo...

CVE-2021-0549

CVE-2021-0549 affects Android 11 (Android-11) Bluetooth stack; the vulnerability is in sspRequestCallback within BondStateMachine.java, where log statements can leak Bluetooth MAC addresses, causing local information disclosure with potentially SYSTEM-level privileges. The issue is confirmed acro...

CVE-2021-0550

The CVE-2021-0550 issue affects Android 11, involving the AnnotateActivity.java onLoadFailed path. It enables local elevation of privilege (EoP) by gaining WRITE_EXTERNAL_STORAGE permissions without user consent due to a confused deputy, with no user interaction required. The vulnerability is des...

CVE-2021-0556

CVE-2021-0556: Affected component is getBlockSum in fastcodemb.cpp on Android 11. The issue is a heap buffer overflow leading to an out-of-bounds read that could cause local information disclosure. Exploitation details are not provided in the connected sources; user interaction is not required. N...

CVE-2021-0569

CVE-2021-0569 affects Android 11 and is caused by a tapjacking/overlay flaw in ContactsDumpActivity.java that can lead to local information disclosure with user interaction required. Impact is information disclosure; exploitation is local and requires user action. Remediation is not explicitly st...

CVE-2021-0987

CVE-2021-0987 : In Android 12, the vulnerability affects the PhoneInterfaceManager.getNeighboringCellInfo function, where an information-disclosure side channel can reveal whether an app is installed without needing query permissions. This enables local information leakage with no extra execution...

CVE-2021-0999

CVE-2021-0999 affects Android 12 and relates to the broadcast definition in AndroidManifest.xml that can set the A2DP Bluetooth device connection state due to a missing permission check. The underlying issue is a privilege-escalation flaw that does not require user interaction and can be exploite...

CVE-2021-25478

Summary: CVE-2021-25478 describes a possible stack-based buffer overflow in the Samsung Exynos CP Chipset prior to SMR Oct-2021 Release 1, which could enable arbitrary memory writes and code execution. The affected component is the Exynos CP Chipset; the root cause is a stack-based overflow vulne...

CVE-2021-26688

Technical details about CVE-2021-26688 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2021-39641

CVE-2021-39641 affects Android kernel on Pixel devices (Android ID A-126949257). The connected Pixel security bulletin lists it as a Bootloader-related Elevation of Privilege (EoP) with moderate impact. The entry indicates patch guidance through the December 2021 Pixel Update Bulletin, where upda...

CVE-2021-39643

CVE-2021-39643 affects the Android kernel component in ic_startRetrieveEntryValue inside acropora/app/identity/ic.c, where a missing validation of a return value can bypass defense-in-depth and enable local privilege escalation to SYSTEM. Exploitation requires local access; no user interaction is...

CVE-2021-39752

CVE-2021-39752 affects Google's Android 12L with the Bubbles component. It describes a permissions bypass that could enable local elevation of privilege without extra execution privileges or user interaction. Affected product/version: Android 12L (Android ID A-202756848). Root cause: a bypass wit...

CVE-2022-20244

CVE-2022-20244 affects Android 13 and its Bluetooth stack. The issue is a missing bounds check in Bluetooth, causing an out-of-bounds write in the Bluetooth subsystem. This could enable local escalation of privilege if more than 100 Bluetooth devices are connected, with no additional execution pr...

CVE-2022-20245

CVE-2022-20245 affects Android 13 and involves the WindowManager component. An insecure default value in WindowManager may allow a recorded lock-screen capture, leading to local information disclosure. Exploitation requires user interaction, and no additional execution privileges are needed. The ...

CVE-2022-20517

CVE-2022-20517 affects Android 13, in MmsSmsProvider.java’s getMessagesByPhoneNumber, where SQL injection can lead to access to restricted tables and local information disclosure with no extra privileges required. The CVE entry notes LOCAL attack vector with LOW exploit complexity and NONE user i...

CVE-2022-20541

The CVE-2022-20541 entry concerns Android 13 where the function phNxpNciHal_ioctl in phNxpNciHal.cc may perform an out-of-bounds read due to a missing bounds check. The vulnerability is described as enabling local information disclosure with System execution privileges required, and reporting ind...

CVE-2022-20563

CVE-2022-20563 describes an out-of-bounds read caused by memory corruption in ufdt_convert within the Android kernel, enabling local privilege escalation to System. Exploitation is local with no user interaction; no remediation details are provided in the linked documents.

CVE-2022-20594

CVE-2022-20594 affects the Android kernel: a missing bounds check in updateStart() of WirelessCharger.cpp can cause an out-of-bounds write, enabling local privilege escalation with System-level execution. No user interaction is required. The vulnerability is categorized as an Elevation of Privile...

CVE-2022-20601

Technical details for CVE-2022-20601 are not publicly available in the provided documents. Monitor for updates from the listed sources.

CVE-2022-26093

CVE-2022-26093 is a vulnerability in the libsimba library’s parser_irot function. The issue is a null pointer dereference that enables an out-of-bounds write by a remote attacker in affected builds prior to Samsung SMR Apr-2022 Release 1. Reports in multiple feeds (NVD, Red Hat, CNVD, CVE lists) ...

CVE-2022-27573

Samsung SMR Apr-2022 Release 1 contains an out-of-bounds write vulnerability in the libsimba library due to improper input validation in parser_infe and sheifd_find_itemIndexin. Exploitation requires privileged access and could be triggered remotely over the network with low attack complexity, pe...

CVE-2022-27826

Technical details about CVE-2022-27826 are not publicly provided in the connected documents; monitor for updates.

CVE-2022-27831

The CVE-2022-27831 entry describes an Improper boundary check in libsflvextractor’s sflvd_rdbuf_bits, before Samsung SMR Apr-2022 Release 1, allowing an attacker to read out-of-bounds memory. Connected sources confirm the component/libsflvextractor and the affected patch level; no exploit code or...

CVE-2022-27835

CVE-2022-27835 describes an improper boundary check in Samsung SMR UWB firmware prior to Apr-2022 Release 1, enabling arbitrary memory write. Affected component: UWB firmware used in Samsung SMR patch package; root cause: insufficient boundary validation in the firmware. Impact stated: potential ...

CVE-2022-30716

CVE-2022-30716 concerns the Samsung DisplayToast component on Android. The issue is an unprotected broadcast in sendIntentForToastDumpLog within DisplayToast, which could let untrusted apps access toast message information from the device. The vulnerability enables information disclosure with a n...

CVE-2022-33721

CVE-2022-33721 affects Samsung DeX for PC prior to SMR Aug-2022 Release 1, due to improper handling of PendingIntent that enables a local attacker to access files with system privileges. The Red Hat/NVD entries reiterate the same description; Red Hat lists it under CVE-2022-33721, and other sourc...

CVE-2022-33732

CVE-2022-33732 is an improper access control vulnerability in Samsung Dex for PC, affecting versions prior to SMR Aug-2022 Release 1. The issue allows a local attacker with unprotected binder access to scan and connect to a PC. The associated remediation is to update to SMR Aug-2022 Release 1 or ...

CVE-2022-39879

CVE-2022-39879 concerns an improper authorization vulnerability in Samsung CallBGProvider prior to SMR Nov-2022 Release 1. A local attacker can exploit this to grant permissions for accessing information tied to the device’s phone UID. The issue is documented across multiple sources as affecting ...

CVE-2022-47360

The CVE-2022-47360 entry concerns a missing permission check in the log service, enabling local denial of service. Affected entity is the log service and the underlying root cause is insufficient access control. Documents consistently describe an impending local DoS impact but do not provide expl...

CVE-2023-20811

CVE-2023-20811 involves a boundary-check failure in the MediaTek IOMMU, causing an out-of-bounds write that could enable local privilege escalation with system privileges. Affected component: IOMMU sub-system (MediaTek). Root cause: missing bounds check leading to out-of-bounds write. Impact: loc...

CVE-2023-20986

CVE-2023-20986 is a vulnerability in Android 13 tied to the function btm_ble_clear_resolving_list_completecomplete in btm_ble_privacy.cc. The issue is an out-of-bounds read caused by a missing bounds check, leading to local information disclosure and requiring system privileges for impact. The de...

CVE-2023-21018

CVE-2023-21018 concerns Google Pixel/Android 13 where the UnwindingWorker in unwinding.cc can trigger an out-of-bounds write due to a use-after-free. This leads to local elevation of privilege with System execution privileges and does not require user interaction. The public descriptions consiste...

CVE-2023-21042

CVE-2023-21042 corresponds to a memory corruption issue via a use-after-free in lwis_allocator_init (lwis_allocator.c) within the Android kernel’s lwis subsystem. This could enable local privilege escalation to SYSTEM with no user interaction required. The OSV entry PUB-A-239873326 confirms the u...

CVE-2023-21045

CVE-2023-21045 affects the Android kernel cpif handling of probe failures. The vulnerability arises from an out-of-bounds read caused by a use-after-free, enabling local information disclosure with SYSTEM privileges; exploitation requires no user interaction. Multiple connected sources (NVD, Red ...

CVE-2023-21066

CVE-2023-21066 describes a heap buffer overflow in the Android kernel, specifically in the cd_CodeMsg function of cd_codec.c. This causes an out-of-bounds write that could enable remote code execution with no privileges and no user interaction required. The vulnerability is documented across mult...

CVE-2023-21171

CVE-2023-21171 affects Android 13 and is tied to the InputDispatcher.cpp function verifyInputEvent. Descriptions across multiple connected sources state a side-channel information disclosure that could enable click fraud, potentially enabling local escalation to System privileges. Exploitation is...

CVE-2023-21186

The CVE-2023-21186 entry describes a likely out-of-bounds read in Dns.cpp (LogResponse) on Android 13 due to a missing bounds check. This could allow remote denial of service without extra privileges or user interaction. Connected sources consistently tie the issue to Android-13 and identify the ...

CVE-2023-21200

CVE-2023-21200 documents an out-of-bounds read in on_remove_iso_data_path() of btm_iso_impl.h on Android 13, caused by improper input validation. This can enable local information disclosure without extra execution privileges or user interaction (per NVD metrics: LOCAL access, LOW privileges, no ...

CVE-2023-21294

CVE-2023-21294 concerns Android’s Slice component, where a missing permission check enables local information disclosure by exposing installed packages. The exploit requires no user interaction and does not require additional privileges. The connected sources reiterate the same description but do...

CVE-2024-20053

CVE-2024-20053 affects the flashc component. The vulnerability is an out-of-bounds write caused by an uncaught exception, enabling local escalation of privileges with System-level execution privileges required. User interaction is not required. A patch is referenced (ALPS08541757; ALPS08541764). ...

CVE-2024-20054

CVE-2024-20054 concerns a missing bounds check in the gnss component, enabling local privilege escalation with System execution privileges required and no user interaction. The vulnerability is associated with MediaTek/gnss implementations, with a patch identified as ALPS08580200 (Issue ID: ALPS0...

CVE-2024-20102

CVE-2024-20102 affects the WLAN driver in MediaTek-based components, where improper input validation can cause an out-of-bounds read. Attackers could achieve remote information disclosure, with system execution privileges required and no user interaction needed. A fixed version/patch is identifie...

CVE-2024-20147

CVE-2024-20147 concerns a vulnerability in MediaTek Bluetooth firmware where an improper exception handling can lead to a reachable assertion, enabling remote denial of service without privileges or user interaction. Affected components are MediaTek chipsets, including MT79XX (and MT2737, MT3603,...

CVE-2024-32922

CVE-2024-32922 involves a logic error in the Pixel GPU power management path, specifically in gpu_pm_power_on_top_nolock within pixel_gpu_power.c, which can lead to a protected memory compromise. The vulnerability could enable local escalation of privilege to the TEE with no additional execution ...

CVE-2024-39433

CVE-2024-39433 affects UNISOC/drm service components in chipsets and is associated with a missing bounds check, causing an out-of-bounds write that can lead to local denial of service with System execution privileges. The connected sources confirm the vulnerable component (drm service) and the im...

CVE-2024-53838

CVE-2024-53838 stems from an incorrect bounds check in Exynos_parsing_user_data_registered_itu_t_t35 within VendorVideoAPI.cpp, causing an out-of-bounds write. The flaw enables local privilege escalation with no additional execution privileges required and does not require user interaction. Affec...