CVE-2017-0477

CVE-2017-0477 is a remote code execution vulnerability in libgdx used by Android. A specially crafted file could cause arbitrary code execution within the context of an unprivileged process, with impact described as High. The vulnerability entry notes affected product/version as Android 7.1.1 and...

CVE-2017-0548

CVE-2017-0548 describes a remote denial-of-service vulnerability in libskia that could allow an attacker to cause a device hang or reboot by processing a specially crafted file. Affected product: Android, specifically versions 7.0 and 7.1.1. The issue is classified as High severity in the Android...

CVE-2017-0604

CVE-2017-0604 concerns Android devices with the Qualcomm power driver in the kernel. The flaw enables a local malicious application to gain elevation of privilege and execute arbitrary code in the kernel context, implying potential local compromise that could require reflashing to repair. The lin...

CVE-2017-0806

CVE-2017-0806 is an elevation of privilege in the Android framework (gatekeeperresponse). The Android bulletin and NVD entries list it as a local, user-interaction-required flaw that could enable a malicious local application to bypass user interaction requirements to gain additional permissions....

CVE-2017-0809

The CVE-2017-0809 entry describes a remote code execution vulnerability in the Android media framework (libstagefright). Affected product: Android. Vulnerable component/file: Android’s media framework library libstagefright. Root cause: remote attacker could craft a file to trigger code execution...

CVE-2017-10998

CVE-2017-10998 : In Qualcomm’s audio driver used on Android CAF builds, the function audio_aio_ion_lookup_vaddr uses a user-provided buffer length to validate the region. If length is large, the address+length check can overflow, yielding a result well below the valid region. This can lead to out...

CVE-2018-11987

CVE-2018-11987 describes a vulnerability affecting all CAF Android releases that use the Linux kernel. In boot, an unlikely memory allocation failure in the secure pool can cause a wrong-pointer access, potentially leading to a kernel panic. The affected surface is the secure pool management duri...

CVE-2018-6268

CVE-2018-6268 affects NVIDIA Tegra libnvmmlite_video.so, where a use-after-free can cause DoS or privilege escalation. Connected NVIDIA bulletins tie this to Jetson TX1/TX2 Linux for Tegra (L4T) and list R28.3 as the updated release to address multiple related flaws, including 2018-6268. Affected...

CVE-2018-9386

CVE-2018-9386 concerns the HTC reboot_block driver. The reboot_block_command may trigger a stack buffer overflow due to a missing bounds check, enabling local privilege escalation to SYSTEM with no user interaction required. Connected sources (NVD, Red Hat, CVE lists) confirm the issue descriptio...

CVE-2018-9388

CVE-2018-9388 affects the Linux touchscreen driver component ftm4_pdc.c (functions store_upgrade and store_cmd). The issue is out-of-bounds writes caused by missing bounds checks or integer underflows, leading to potential elevation of privilege. Documentation across sources (NVD, Red Hat, CVE li...

CVE-2019-2072

CVE-2019-2072 affects Android 10 through the libxaac library. The issue is an out-of-bounds write caused by a missing bounds check in libxaac, enabling remote code execution with the attacker’s interaction required. Impact is described as RCE with high severity under CVSS 3.1 (HIGH, network attac...

CVE-2019-2134

CVE-2019-2134 affects Android due to an out-of-bounds write in phFriNfc_ExtnsTransceive (phNxpExtns_MifareStd.cpp) caused by integer overflow. Impact: local privilege escalation with HIGH confidentiality/integrity/availability implications; exploitation requires user interaction and local access....

CVE-2019-2169

CVE-2019-2169 affects the Android 10 libxaac library, where an information disclosure can occur due to uninitialized data. The issue could expose partial confidential data with no additional execution privileges required, and exploitation requires user interaction. | Affected component: libxaac i...

CVE-2019-2205

CVE-2019-2205 affects Android 8.0–10 and is caused by a use-after-free in ProxyResolverV8::SetPacScript (proxy_resolver_v8.cc), leading to memory corruption and remote code execution without user interaction. Exploitation is network-based (no privileges required) with high impact on confidentiali...

CVE-2019-9233

CVE-2019-9233 affects wpa_supplicant_8 on Android-10. Root cause: an out-of-bounds read due to an incorrect bounds check, enabling remote information disclosure without privileges and without user interaction. The impact is info disclosure; no exploit details or in-the-wild status are provided in...

CVE-2019-9247

CVE-2019-9247 affects the Android 10 AAC Codec component, stemming from a missing variable initialization that can lead to remote information disclosure. According to NVD metadata, the CVSS v3.1 base score is 6.5 (Medium) with NETWORK attack vector, LOW complexity, no privileges required, but use...

CVE-2021-0349

The CVE-2021-0349 entry concerns the Android display driver. A use-after-free in the display driver could cause memory corruption, enabling local privilege escalation with System privileges required for exploitation. No user interaction is needed. Affected products/versions include Android 9–11. ...

CVE-2021-0543

CVE-2021-0543 : A vulnerability in phNxpNciHal_ext.cc (function phNxpNciHal_process_ext_rsp) allows a possible out-of-bounds write due to an integer overflow, enabling local elevation of privilege with System execution privileges. Exploitation does not require user interaction. Affected: Android ...

CVE-2021-0544

CVE-2021-0544 affects Android 11 and is described across multiple sources as an out-of-bounds write in phNxpNciHal.cc (function: phNxpNciHal_print_res_status) caused by a missing bounds check. The vulnerability can lead to local elevation of privilege with System execution privileges required, an...

CVE-2021-0546

The CVE-2021-0546 issue affects Google Android 11 in the phNxpNciHal_print_res_status path within phNxpNciHal.cc, caused by an out-of-bounds write due to a missing bounds check. This leads to local elevation of privilege with System execution privileges required and does not require user interact...

CVE-2021-0556

CVE-2021-0556: Affected component is getBlockSum in fastcodemb.cpp on Android 11. The issue is a heap buffer overflow leading to an out-of-bounds read that could cause local information disclosure. Exploitation details are not provided in the connected sources; user interaction is not required. N...

CVE-2021-0572

CVE-2021-0572 affects Android 11 with a vulnerability in AccountManagerService.doNotification where an unsafe PendingIntent allows a local permission bypass and potential local information disclosure. Exploitation requires no user interaction and privileges are potentially low with local access. ...

CVE-2021-0987

CVE-2021-0987 : In Android 12, the vulnerability affects the PhoneInterfaceManager.getNeighboringCellInfo function, where an information-disclosure side channel can reveal whether an app is installed without needing query permissions. This enables local information leakage with no extra execution...

CVE-2021-0999

CVE-2021-0999 affects Android 12 and relates to the broadcast definition in AndroidManifest.xml that can set the A2DP Bluetooth device connection state due to a missing permission check. The underlying issue is a privilege-escalation flaw that does not require user interaction and can be exploite...

CVE-2021-1016

The CVE-2021-1016 issue affects Android 12 and points to UsbPermissionActivity.java. A tapjacking/overlay flaw could grant USB access to an app without informed user consent, enabling local privilege escalation with user interaction required for exploitation. The vulnerability is described across...

CVE-2021-1032

CVE-2021-1032 affects Android 12 and is tied to getMimeGroup in PackageManagerService.java. The issue enables a side-channel disclosure that can reveal whether an app is installed without any query permissions, constituting a local information disclosure. Exploitation requires no user interaction...

CVE-2021-27901

Summary (CVE-2021-27901) : Affects LG mobile devices running Android 11. The vulnerability arises from mishandling of fingerprint recognition when Local High Beam Mode (LHBM) does not function properly under bright illumination, as identified by LG under ID LVE-SMP-210001 (March 2021). The issue ...

CVE-2021-39643

CVE-2021-39643 affects the Android kernel component in ic_startRetrieveEntryValue inside acropora/app/identity/ic.c, where a missing validation of a return value can bypass defense-in-depth and enable local privilege escalation to SYSTEM. Exploitation requires local access; no user interaction is...

CVE-2022-20258

CVE-2022-20258 affects Android 13 Bluetooth. The issue stems from a configuration error that allows bypassing compiler exploit mitigations, enabling local escalation of privilege with no additional execution privileges required and no user interaction. Impact is limited to devices where Bluetooth...

CVE-2022-20276

CVE-2022-20276 concerns the Android 13 framework where the DevicePolicyManager exposes a side-channel that can reveal whether an app is installed without query permissions. The vulnerability is described as a local information-disclosure issue that does not require user interaction. The affected ...

CVE-2022-26091

CVE-2022-26091 affects Samsung Knox Manage with an improper access control vulnerability that can allow a local, physical attacker to bypass Knox Manage by using a function key on the hardware keyboard. The issue is described as a bypass of access controls via a hardware-key function, impacting c...

CVE-2022-26467

CVE-2022-26467 affects the rpmb component in MediaTek chips. An out-of-bounds write caused by an incorrect bounds check could enable local privilege escalation to SYSTEM with no user interaction required. The advisory references patch ALPS07167738 (Issue ALPS07167738) as a fix. Exploitation statu...

CVE-2022-26475

CVE-2022-26475 concerns a local privilege-escalation in MediaTek wlan due to an out-of-bounds write from a missing bounds check. Affected component is wlan code within MediaTek-based devices; exploitation would grant System-level privileges without user interaction, as described in multiple sourc...

CVE-2022-27827

The CVE-2022-27827 entry concerns an improper validation vulnerability in MediaMonitorDimension, prior to Samsung SMR Apr-2022 Release 1. Affected item appears to be the MediaMonitorDimension component (in Samsung context) where input validation fails, enabling attackers to launch certain activit...

CVE-2022-28782

CVE-2022-28782 concerns Samsung’s Contents To Window in the context of the SMR May-2022 Release 1. The issue is described as an improper access control that could allow a physical attacker to install a package before the Setup wizard finishes. The available remediation is a patch that blocks the ...

CVE-2023-20973

CVE-2023-20973 affects Android 13, specifically the Bluetooth stack: in btm_create_conn_cancel_complete() of btm_sec.cc, a missing bounds check enables an out-of-bounds read. This can lead to local information disclosure with SYSTEM-level privileges needed; exploitation reportedly does not requir...

CVE-2023-20996

CVE-2023-20996 affects Android 13 (Pixel devices) and is described as a DoS via an input validation flaw that can trigger a persistent reboot loop. The vulnerability enables local denial of service with no user interaction required and requires user privileges. Public details confirm the issue is...

CVE-2023-21005

CVE-2023-21005 affects Android 13, specifically the Transcode Permission Controllers. The root cause is a missing permission check in getAvailabilityStatus, enabling a possible local escalation of privilege with no additional execution privileges and no user interaction required. Public reference...

CVE-2023-21008

Summary : CVE-2023-21008 affects Android 13 with code in p2p_iface.cpp. The root cause is a missing bounds check causing an out-of-bounds read, leading to local information disclosure with system privileges required. Exploitation is described as requiring local access and no user interaction. Imp...

CVE-2023-21066

CVE-2023-21066 describes a heap buffer overflow in the Android kernel, specifically in the cd_CodeMsg function of cd_codec.c. This causes an out-of-bounds write that could enable remote code execution with no privileges and no user interaction required. The vulnerability is documented across mult...

CVE-2023-21079

CVE-2023-21079 affects the Android kernel component related to the dhd_rtt.c function, specifically in the routine named rtt_unpack_xtlv_cbfn . The issue is a heap buffer overflow that can cause an out-of-bounds write. The published descriptions consistently warn of local escalation of privilege ...

CVE-2023-21147

CVE-2023-21147 (Android kernel) involves a use-after-free in lwis_i2c_device_disable within lwis_device_i2c.c. The underlying logic error can lead to local elevation of privilege with no extra execution privileges required, and exploitation is described as local with no user interaction. Multiple...

CVE-2023-21169

CVE-2023-21169 affects Android 13 and relates to an out-of-bounds read in inviteInternal of p2p_iface.cpp caused by a missing bounds check. The vulnerability can lead to local information disclosure with System execution privileges required; exploitation does not require user interaction. The ava...

CVE-2023-21195

CVE-2023-21195 concerns Android 13 devices. The issue is in the Bluetooth stack: function btm_ble_periodic_adv_sync_tx_rcvd in btm_ble_gap.cc may perform an out-of-bounds read due to an incorrect bounds check. This could allow local information disclosure over Bluetooth if the device firmware is ...

CVE-2023-21214

CVE-2023-21214 describes an out-of-bounds read caused by unsafe deserialization in the Android component p2p_iface.cpp, within addGroupWithConfigInternal. This leads to local information disclosure with potential system-level execution privileges required for exploitation, and does not require us...

CVE-2023-21367

CVE-2023-21367 concerns the Android Scudo memory allocator. The connected documents confirm a heap OOB read/write due to an insecure implementation/design, enabling local information disclosure without extra execution privileges and with no user interaction required. The Android 14 security relea...

CVE-2023-21392

CVE-2023-21392 concerns a memory corruption vulnerability in Bluetooth, caused by a use-after-free in the Bluetooth stack that can enable local privilege escalation when pairing/connecting to a Bluetooth device. Exploitation does not require user interaction and does not need pre-existing executi...

CVE-2024-20060

The CVE-2024-20060 entry concerns MediaTek devices with a vulnerability in the da module causing privilege escalation due to an incorrect status check. Impact is local privilege escalation with System execution privileges required, and exploitation does not require user interaction (per multiple ...

CVE-2024-20102

CVE-2024-20102 affects the WLAN driver in MediaTek-based components, where improper input validation can cause an out-of-bounds read. Attackers could achieve remote information disclosure, with system execution privileges required and no user interaction needed. A fixed version/patch is identifie...

CVE-2024-20128

CVE-2024-20128 affects MediaTek Telephony components (Telephony in MediaTek chipsets). The issue is an out-of-bounds read due to a missing bounds check, which could allow remote denial of service without user interaction. Impact is described as high (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) per CVSS ...