CVE-2024-20147

CVE-2024-20147 concerns a vulnerability in MediaTek Bluetooth firmware where an improper exception handling can lead to a reachable assertion, enabling remote denial of service without privileges or user interaction. Affected components are MediaTek chipsets, including MT79XX (and MT2737, MT3603,...

CVE-2024-56184

CVE-2024-56184 describes a vulnerability in static long dev_send of tipc_dev_ql where an incorrect bounds check leads to an out-of-bounds read. This can cause local information disclosure without requiring privileges or user interaction. The vulnerability is documented across multiple sources (in...

CVE-2025-0079

CVE-2025-0079 describes a logic error in Android's Bluetooth stack (avdtp/avctp) that could allow unencrypted channels, enabling local privilege escalation with user privileges required and no user interaction. Connected documents indicate this is addressed in the Android security bulletin for 20...

CVE-2025-0093

CVE-2025-0093 affects the Android Bluetooth stack, with a root cause in AdapterService.java: handleBondStateChanged missing a permission check, enabling information disclosure without extra execution privileges. Exploitation requires user interaction; impact is information disclosure via Bluetoot...

CVE-2025-22409

CVE-2025-22409 is a local Elevation of Privilege in Android-related code caused by a use-after-free in rfc_send_buf_uih within rfc_ts_frames.cc, enabling arbitrary code execution with no extra privileges and no user interaction. Connected sources confirm the vulnerability class and the affected f...

CVE-2025-22410

CVE-2025-22410 is a use-after-free in Google Android that can lead to arbitrary code execution and local privilege escalation with no user interaction. The issue is classified as RCE, Critical, affecting the Framework/System and is addressed by Android security patches for the 2025-03-01/2025-03-...

CVE-2011-1149

CVE-2011-1149 : Android versions before 2.3 expose the system property space, allowing local apps to bypass the sandbox and gain privileges via ashmem usage and ASHMEM_SET_PROT_MASK. The issue enables local privilege escalation, illustrated by references to psneuter and KillingInTheNameOf; exploi...

CVE-2011-3881

CVE-2011-3881 affects WebKit as used in Google Chrome <15.0.874.102 and Android

CVE-2015-3874

CVE-2015-3874 affects the Sonivox components in Android prior to 5.1.1 LMY48T, allowing remote attackers to execute arbitrary code or cause memory corruption via a crafted media file. The issue is listed in the Android 2015-10-01 bulletin as a remote-code-execution vulnerability in mediaserver-re...

CVE-2015-6626

Affected software: Android libstagefright (mediaserver) prior to 5.1.1 LMY48Z and 6.0 prior to 2015-12-01. Root cause: information disclosure vulnerability allowing remote attackers to obtain sensitive data and bypass an unspecified protection mechanism via unknown vectors (Signature/SignatureOrS...

CVE-2015-6647

CVE-2015-6647 is a privilege-escalation in the Widevine QSEE TrustZone app on Android. A crafted app exploiting QSEECOM access could grant elevated privileges on devices running Android 5.x before 5.1.1 LMY49F and Android 6.0 before 2016-01-01. Mitigation/fixes are provided by Android patches: An...

CVE-2016-0825

The CVE-2016-0825 issue concerns the Widevine Trusted Application on Android 6.0.1 before 2016-03-01. According to the sources, an attacker with kernel access could disclose TrustZone secure-storage information, demonstrated by obtaining Signature or SignatureOrSystem permissions. The vulnerabili...

CVE-2016-10381

CVE-2016-10381 : The issue affects Qualcomm components in Android CAF releases using the Linux kernel, where the UE can send unprotected MeasurementReports that disclose UE location. Connected documents confirm a Qualcomm information-disclosure vulnerability linked to MeasurementReports, with the...

CVE-2016-5346

CVE-2016-5346 affects Google Pixel/Pixel XL via the Qualcomm Avtimer driver. It is a NULL pointer dereference when processing an accept() call on AF_MSM_IPC sockets in a user process, enabling a local attacker to disclose sensitive information. The available documents confirm local information di...

CVE-2016-5348

CVE-2016-5348 affects the GPS component in Android, dating from 4.x up to 7.0, where a man-in-the-middle can trigger memory exhaustion and a DoS by sending a large xtra.bin/xtra2.bin from spoofed gpsonextra.net or izatcloud.net hosts. Root cause is malformed/overlarge GPS data files processed by ...

CVE-2016-5856

Technical details for CVE-2016-5856 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-0541

CVE-2017-0541 is a remote code execution vulnerability in Android’s Mediaserver (sonivox) that can be triggered by processing a specially crafted media file, causing memory corruption within Mediaserver. Affected Android versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1; Android ID A-34031018...

CVE-2017-13255

CVE-2017-13255 affects the Android System component; an out-of-bounds write in process_service_attr_req within sdp_server.c can lead to remote code execution with no privileges and no user interaction. Affected Android versions range from 5.1.1 through 8.1 (per Android bulletin listing under Syst...

CVE-2017-13258

CVE-2017-13258 affects Android Bluetooth BNEP: a missing bounds check in bnep_data_ind() within bnep_main.cc can trigger an out-of-bounds read, enabling remote information disclosure without user interaction. Affected Android versions include 5.1.1, 6.0/6.0.1, 7.0, 7.1.1/7.1.2, 8.0, and 8.1 (Andr...

CVE-2017-9714

CVE-2017-9714 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The root cause is an out-of-bounds memory access in limCheckRxRSNIeMatch when an incorrect RSNIE is received in an association request. The CVE is listed with a NVD CVSS v3.0 base score of 7...

CVE-2018-9515

CVE-2018-9515 is a kernel vulnerability affecting the Android kernel sdcardfs code (inode.c) where memory corruption can occur due to improper locking, enabling local privilege escalation without user interaction. The issue is categorized as a high-severity Elevation of Privilege (EoP) in the 201...

CVE-2019-9367

CVE-2019-9367 concerns Bluetooth on Android 10 with a missing bounds check causing an out-of-bounds read and potential remote information disclosure. The vulnerability requires no user interaction and can be exploited over the network; exploitation status is not detailed in the provided documents...

CVE-2020-0100

The CVE-2020-0100 entry concerns an out-of-bounds read in IHDCP.cpp during onTransact, allowing local information disclosure without extra privileges in Android 8.0/8.1. Root cause is incorrect error handling that can expose data from a privileged process; exploitation is local and does not requi...

CVE-2020-0347

CVE-2020-0347 affects Android 11 with an out-of-bounds write in iptables caused by an incorrect bounds check. The vulnerability could allow local escalation to SYSTEM privileges without user interaction. Evidence in the initial document notes the affected product (Android 11) and the privilege le...

CVE-2021-0536

CVE-2021-0536 affects Android 11: in the DropFile path of WiFiInstaller there is a mechanism that allows deletion of files accessible to CertInstaller due to a confused deputy, enabling local escalation of privilege with no additional execution privileges needed; exploitation does not require use...

CVE-2021-0539

CVE-2021-0539 concerns an elevation of privilege in Android 11 via the MmsService.java component. The vulnerability arises in the method archiveStoredConversation , where a missing permission check could allow an attacker to archive a message conversation without user consent. This enables local ...

CVE-2021-0567

CVE-2021-0567 affects Android 11, where isRestricted in RemoteViews.java can be bypassed to inject font files, enabling local escalation of privilege with no additional privileges or user interaction. The vulnerability is categorized as Elevation of Privilege (EoP). In public advisories, patches ...

CVE-2021-0939

CVE-2021-0939 affects the Android kernel, description states: in set_default_passthru_cfg of passthru.c there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with system privileges required; user interaction not needed. The provided ...

CVE-2021-1030

CVE-2021-1030 affects Android 12 with a vulnerability in NotificationManagerService.setNotificationsShownFromListener that allows a local attacker to deduce whether an app is installed without query permissions via a side-channel. Impact is local information disclosure with no execution privilege...

CVE-2021-1031

CVE-2021-1031 : Android 12’s NotificationManagerService.cancelNotificationsFromListener can indirectly determine whether an app is installed via a side‑channel information disclosure, enabling local information disclosure without additional execution privileges. The issue is documented with a LOW...

CVE-2021-26687

The CVE-2021-26687 entry concerns LG mobile devices running Android 8–10 where the HostnameVerified default is mishandled in preloaded applications. Connected sources confirm the affected platform (LG Android devices) and the root cause: mishandling of HostnameVerified in preloaded apps, which ca...

CVE-2021-39645

CVE-2021-39645 is listed in the Google Pixel security bulletin as an Elevation of Privilege (EoP) vulnerability affecting the Bootloader. The CVE is categorized under Pixel issues with High severity. The Pixel bulletin notes patches are included in updates at the 2021-12-05 security patch level f...

CVE-2022-20038

CVE-2022-20038 affects the ccu driver in MediaTek hardware. The issue is memory corruption caused by an incorrect bounds check, enabling local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. Reported impact is consistent across so...

CVE-2022-20246

CVE-2022-20246 affects Android 13 (WindowManager). The issue is an incorrect UID/permission check that allows bypassing background-activity start restrictions, leading to local escalation of privilege without user interaction. Exploitation is local and requires no additional privileges; CVSS indi...

CVE-2022-20250

CVE-2022-20250 affects the Android 13 Messaging component. The issue stems from improper input validation that lets an attacker attach files to a message without proper access checks, enabling local elevation of privilege. Exploitation requires user interaction, and the CVSS 3.1 vector indicates ...

CVE-2022-20253

CVE-2022-20253 affects the Android 13 Bluetooth stack. The issue is a cleanup failure caused by an uncaught exception that could enable remote denial of service without additional privileges or user interaction. Root cause is an uncaught exception in Bluetooth handling leading to DoS. Mitigation ...

CVE-2022-20261

The CVE-2022-20261 entry concerns the Android LocationManager component. A missing permission check could allow an attacker to obtain location information, causing local information disclosure. Exploitation requires System privileges but not user interaction, with a local attack vector. Affected ...

CVE-2022-20561

CVE-2022-20561 affects the Android kernel in aud_hal_tunnel.c, where a use-after-free can cause memory corruption. The impact is local elevation of privilege with no extra execution privileges required and no user interaction needed. Affected component: Android kernel (aud_hal_tunnel.c). Root cau...

CVE-2022-21757

CVE-2022-21757 affects the WIFI firmware (noted in MediaTek context) with a missing count check that can cause a system crash, enabling remote denial of service without required privileges or user interaction. The entry lists a patch ID ALPS06468894 / issue ALPS06468894 as the remediation. No fur...

CVE-2022-21771

CVE-2022-21771 affects the GED driver and is a use-after-free caused by a race condition, enabling local privilege escalation to System with no user interaction required. The vulnerability details indicate the impact is partial to higher in integrity/availability per CVSS, with local exploit prer...

CVE-2022-21776

The CVE-2022-21776 issue is a race-condition triggered use-after-free in MediaTek’s MDP component leading to local privilege escalation with SYSTEM rights, no user interaction required. Multiple sources (NVD entry, Red Hat advisory, CNVD/CNNVD summaries) corroborate the same root cause and impact...

CVE-2022-21780

CVE-2022-21780 affects the MediaTek WLAN driver. It is an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation with SYSTEM execution privileges required and no user interaction. CVSSv3.1: 6.7 (LOCAL, HIGH impact on Confidentiality/Integrity/Availability; HIGH ...

CVE-2022-23425

CVE-2022-23425 describes an input validation flaw in the Exynos baseband prior to Samsung SMR Feb-2022 Release 1, allowing an attacker to send arbitrary NAS signaling messages using a fake base station. Affected component: Exynos baseband; issue stems from improper input validation. Impact is des...

CVE-2022-26434

CVE-2022-26434 describes an out-of-bounds write in the mailbox caused by a missing bounds check, enabling local escalation to System privileges without user interaction. Public references across NVD/Red Hat and related feeds identify the patch ID ALPS07138450 (Issue ALPS07138450) as the remediati...

CVE-2022-27569

CVE-2022-27569 is a heap-based buffer overflow in the parser_infe function of the libsimba library, exploitable remotely to achieve code execution. The condition is with software versions prior to SMR Apr-2022 Release 1 . Affected component: libsimba parser_infe; root cause: heap overflow. Impact...

CVE-2022-27821

CVE-2022-27821 concerns the Quram Agif library prior to Samsung SMR Apr-2022 Release 1, where an improper boundary check enables denial of service when processing a crafted image file. Multiple sources (Red Hat, NVD, CNVD, CVE listings) describe the issue consistently as a boundary-checking flaw ...

CVE-2022-30717

The CVE-2022-30717 entry concerns Samsung AR Emoji prior to SMR Jun-2022 Release 1, with an underlying issue described as an improper caller check. The vulnerability allows untrusted applications to access certain camera functions via deeplink, presenting a remote-like risk without user interacti...

CVE-2022-32638

CVE-2022-32638 describes a race-condition in the ISP component allowing an out-of-bounds write that can lead to local privilege escalation with SYSTEM privileges; exploitation reportedly requires no user interaction. A patch is referenced (ALPS07494449/ALPS07494449). Some connected sources attrib...

CVE-2022-38682

CVE-2022-38682 affects the contacts service, where a missing permission check could allow a local denial of service without requiring additional privileges. The Red Hat, NVD, CNNVD, and other connected records corroborate the same description; no explicit exploitation details, affected software v...

CVE-2022-39879

CVE-2022-39879 concerns an improper authorization vulnerability in Samsung CallBGProvider prior to SMR Nov-2022 Release 1. A local attacker can exploit this to grant permissions for accessing information tied to the device’s phone UID. The issue is documented across multiple sources as affecting ...