CVE-2021-0991

CVE-2021-0991 affects Android 12 via the OnMetadataChangedListener in AdvancedBluetoothDetailsHeaderController.java, causing a log information disclosure that could leak Bluetooth MAC addresses. The root cause is information disclosure through verbose/loggable data, enabling local information dis...

CVE-2021-0993

CVE-2021-0993 affects Android 12 and is due to a resource exhaustion condition in TextLine.java’s getOffsetBeforeAfter. The issue can cause remote denial of service with no extra privileges, and exploitation requires user interaction. Public references in the connected records corroborate a DoS i...

CVE-2021-0995

The CVE-2021-0995 entry affects Android 12 and is tied to the WifiServiceImpl.registerSuggestionConnectionStatusListener function, enabling a side-channel information disclosure to infer whether an app is installed without query permissions. This results in local information disclosure with no ex...

CVE-2021-1022

CVE-2021-1022 : In Android 12, a missing null check in btif_in_hf_client_generic_evt (btif_hf_client.cc) can cause a Bluetooth service crash, enabling a remote DoS without user interaction. The issue is tied to the Bluetooth Hands-Free Profile client, with impact described as remote denial of ser...

CVE-2021-1034

CVE-2021-1034 affects Android 12 via the PhoneInterfaceManager.getLine1NumberForDisplay path. A missing permission check enables an app to infer whether another app is installed, causing local information disclosure without requiring additional execution privileges. The vulnerability stems from i...

CVE-2021-25365

CVE-2021-25365 concerns an improper exception control in the Samsung softsimd component prior to SMR APR-2021 Release 1. The vulnerability allows unprivileged applications to access the softsimd API. The entry is tied to Samsung SMR APR-2021 Release 1, indicating a patch/maintenance release in th...

CVE-2021-39780

CVE-2021-39780 affects Android 12L Traceur: a missing permission check allows bypassing developer settings to capture system traces, enabling local privilege escalation with user interaction required. The Android 12L security release notes indicate this issue is addressed in Android 12L; devices ...

CVE-2022-21769

The CVE-2022-21769 issue affects the CCCI component and is caused by a missing bounds check that enables an out-of-bounds read. This could allow local information disclosure with system-privilege execution requirements (no user interaction). Public references in Red Hat and NVD describe the same ...

CVE-2022-26430

CVE-2022-26430 affects MediaTek devices with a mailbox type confusion leading to out-of-bounds write. This can enable local privilege escalation to SYSTEM level with no user interaction required. Patch ALPS07032521 (Issue ALPS07032521) referenced in multiple sources; no remediation details beyond...

CVE-2022-27570

CVE-2022-27570 is a heap-based buffer overflow in the parser_single_iref function of the Samsung SMR/libsimba library prior to the April 2022 SMR Release 1 . The vulnerability allows remote code execution with network-based access and no user interaction, due to an overflow in heap memory handlin...

CVE-2022-27824

CVE-2022-27824 : The exposed issue is an improper size check in the function sapefd_parse_meta_DESCRIPTION within the libsapeextractor library, before the Samsung SMR Apr-2022 Release 1. This causes an out-of-bounds read when processing a crafted media file. Publicly documented variations describ...

CVE-2022-33699

CVE-2022-33699 affects Samsung TelephonyUI’s getDsaSimImsi, where IMSI can be disclosed through logs due to insufficient protection in TelephonyUI. The issue is a local disclosure vulnerability, enabling a local attacker to access IMSI data. Affected component is Samsung TelephonyUI prior to SMR ...

CVE-2022-33720

CVE-2022-33720 concerns Samsung AppLock. The vulnerability is an improper authentication issue in AppLock prior to SMR Aug-2022 Release 1, which could let a physical attacker bypass the lock and access Chrome secured by AppLock via a new tap shortcut. Affected component: AppLock’s Chrome access c...

CVE-2022-39124

The CVE-2022-39124 entry describes a vulnerability in the sensor driver where a missing bounds check enables an out-of-bounds write, leading to local denial of service in the kernel. Public sources consistently attribute this to the Unisoc sensor/ chipset context (e.g., SC9863A/SC9832E/SC7731E/T6...

CVE-2022-39887

CVE-2022-39887 refers to an improper access‑control vulnerability in the Samsung MiscPolicy function clearAllGlobalProxy (before SMR Nov-2022 Release 1) that allows a local attacker to configure EDM settings. The NVD entry shows a low to medium overall risk depending on vector/impact metrics, wit...

CVE-2022-47343

In CVE-2022-47343 , the issue is a missing permission check in engineermode services , enabling local denial of service. The provided documents confirm the affected area but do not specify product versions, exploit details, or concrete remediation steps. Exploitation status and patches are not de...

CVE-2022-47345

CVE-2022-47345 affects engineermode services due to a missing permission check, enabling local denial of service. The included metrics indicate a CVSS v3.1 base score of 5.5 (LOCAL vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Exploitation status is not detailed in the provided documents, and no ...

CVE-2022-47360

The CVE-2022-47360 entry concerns a missing permission check in the log service, enabling local denial of service. Affected entity is the log service and the underlying root cause is insufficient access control. Documents consistently describe an impending local DoS impact but do not provide expl...

CVE-2023-20810

CVE-2023-20810 affects the IOMMU component in MediaTek platforms. Root cause: improper input validation in the IOMMU leading to potential local information disclosure with required system execution privileges. Exploitation described as local, with no user interaction needed. Impact per documents:...

CVE-2023-20821

CVE-2023-20821 concerns an out-of-bounds write in nvram due to a missing bounds check in MediaTek-based hardware. The underlying issue can allow local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. Reported remediation refere...

CVE-2023-20839

CVE-2023-20839 affects the imgsys component. The root cause is an out-of-bounds read due to missing valid range checking, leading to local information disclosure with system execution privileges required and user interaction for exploitation. The vulnerability is documented across multiple source...

CVE-2023-21161

CVE-2023-21161 affects the Android kernel, caused by an out-of-bounds write in the Parse function of simdata.cpp due to a missing bounds check. This can lead to local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. Several con...

CVE-2023-21167

CVE-2023-21167 affects Android 13, in DevicePolicyManagerService.setProfileName. The issue is an out-of-bounds/ missing bounds check that can crash the SystemUI menu, causing local denial of service without extra privileges and without user interaction. Public documents consistently frame this as...

CVE-2023-21382

This CVE (CVE-2023-21382) concerns Android’s Content Resolver allowing local information disclosure due to a missing permission check. Affected: Android devices (Content Resolver metadata about content providers). Root cause: insufficient permission validation on access to content provider metada...

CVE-2023-32810

The CVE-2023-32810 entry applies to the Bluetooth driver in MediaTek devices. The vulnerability is an out-of-bounds read caused by improper input validation in the Bluetooth driver, which can lead to local information leakage and potentially System-level execution privileges. Exploitation is desc...

CVE-2023-32875

CVE-2023-32875 affects MediaTek platforms via the keyInstall function. The root cause is a missing bounds check in keyInstall, enabling local information disclosure and requiring System privileges for exploitation; no user interaction is needed. The CVE entry cites Patch ID ALPS08308607 and Issue...

CVE-2023-52345

The CVE-2023-52345 entry concerns a vulnerability in the modem driver where improper input validation can cause a system crash, potentially enabling local information disclosure with System execution privileges. Affected component: modem driver (details on vendor/product not explicitly enumerated...

CVE-2025-0092

CVE-2025-0092 : A permission bypass exists in Android’s Bluetooth stack, specifically in handleBondStateChanged of AdapterService.java, caused by a misleading or insufficient UI. This can lead to information disclosure to a proximal attacker without additional execution privileges; exploitation r...

CVE-2025-20653

CVE-2025-20653 corresponds to a MediaTek chipset issue described as an out-of-bounds read caused by an integer overflow. The vulnerability could enable local information disclosure with a high impact on confidentiality, integrity, and availability, requiring physical access to the device and user...

CVE-2025-20980

The CVE-2025-20980 entry concerns Samsung/libsavscmn with an out-of-bounds write that leads to memory corruption on devices running Android prior to 15. Affected component: libsavscmn (memory corruption vulnerability). Root cause: out-of-bounds write. Impact: local attackers could trigger memory ...

CVE-2025-22411

CVE-2025-22411 affects the Android Bluetooth SDP discovery path: use-after-free in process_service_attr_rsp (sdp_discovery.cc) due to a logic error, enabling remote code execution with no privileges and no user interaction. Exploitation is described as proximal/adjacent (Bluetooth range). Root ca...

CVE-2012-6301

The CVE-2012-6301 issue affects Android 4.0.3’s Stock/Browser component. A remote attacker can trigger a denial of service (application crash) by presenting a crafted market: URI in the SRC attribute of an IFRAME element. Multiple connected sources corroborate the vulnerability and describe its i...

CVE-2015-3860

CVE-2015-3860 is a Lockscreen elevation-of-privilege flaw in Android 5.0/5.1 (build LMY48M) where the passwordEntry field in Keyguard does not cap input length, enabling a physical attacker to crash SystemUI and bypass the lock screen. Affected versions include Android 5.0 and 5.1 up to 5.1.0; Go...

CVE-2015-6575

Technical details for CVE-2015-6575 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2016-0802

CVE-2016-0802 affects the Broadcom Wi‑Fi kernel driver, vulnerable in Android 4.x up to 4.4.3/4.4.4, 5.x up to 5.1.x, and 6.x up to 2016-02-01. An unauthenticated, adjacent attacker can send crafted wireless control message packets to trigger memory corruption, leading to remote code execution or...

CVE-2017-0422

CVE-2017-0422 is a DoS in Android’s Bionic DNS that can be triggered by a crafted network packet to cause a device hang or reboot. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The vulnerability stems from the Bionic DNS component and is remote in scope (netwo...

CVE-2017-0429

CVE-2017-0429 is an elevation-of-privilege vulnerability in the NVIDIA kernel driver’s i2c-hid component, enabling a local attacker to write arbitrary values to kernel memory and potentially execute code with kernel privileges. Public descriptions tie the issue to the NVIDIA kernel driver on Andr...

CVE-2017-0745

CVE-2017-0745 is a remote code execution vulnerability in the Android media framework, specifically the avc decoder. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The connected documents consistently describe the issue as a media-framework fault enablin...

CVE-2017-13208

CVE-2017-13208 affects Android via libnetutils/packet.c receive_packet, enabling a possible remote code execution through an out-of-bounds write on DHCP responses. Impacted Android versions: 5.1.1–8.1. Vector: network; no user interaction required; no additional privileges needed. The Android Sec...

CVE-2017-13261

CVE-2017-13261 affects Android Bluetooth via the BNEP implementation, specifically the bnep_process_control_packet path in bnep_utils.cc. The flaw is an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure without user interaction over a Bluetooth network co...

CVE-2017-13283

CVE-2017-13283 affects Android devices via a flaw in the Bluetooth stack: in avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out-of-bounds write on the stack due to a missing bounds check. This could enable remote code execution with no privileges or user interaction requir...

CVE-2017-13323

CVE-2017-13323 is a Google/Android elevation-of-privilege flaw caused by an out-of-bounds write in String16.cpp due to an integer overflow. The Red Hat and CNVD entries restate the issue; Android/Pixel bulletin notes this CVE as EoP (Moderate) and indicates patches are included in the 2018-05-05 ...

CVE-2018-9395

The CVE-2018-9395 issue affects the Mediatek WLAN driver (mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config) in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c. It describes a possible out-of-bounds write due to a missing bounds check, enabling local...

CVE-2018-9407

CVE-2018-9407 : In emmc_rpmb_ioctl of emmc_rpmb.c there is a Missing Bounds Check, leading to potential information disclosure of kernel data. Connected sources confirm this issue on Google Pixel devices and reference the Android Pixel/Nexus security bulletin, which states that patch levels of 20...

CVE-2018-9488

CVE-2018-9488 is an Android local‑privilege-escalation vulnerability rooted in SELinux permissions for crash_dump.te, allowing an unprivileged user to escalate to System via a multi-stage chain (zygote → crash_dump → vold → init/kernel). Publicly linked PoCs and analyses describe how an attacker ...

CVE-2019-9259

CVE-2019-9259 affects the Android 10 Bluetooth stack, where a use-after-free leads to an out-of-bounds write. This could allow local elevation of privilege to SYSTEM with no user interaction. Exploitation status is not detailed in the provided docs. Remediation is addressed in Android 10 security...

CVE-2019-9272

CVE-2019-9272 is an Android 10 information-disclosure issue described as a WiFi state leak via a permissions bypass, enabling local disclosure of WiFi state and potential device location without user interaction. Documents agree the affected product is Android 10, with no explicit vendor/componen...

CVE-2019-9303

CVE-2019-9303 is an Android 10 vulnerability in the libFDK component caused by an integer overflow leading to an out-of-bounds write. The issue could enable remote code execution and is described as requiring user interaction for exploitation (no additional privileges required). The vulnerability...

CVE-2019-9363

CVE-2019-9363 affects Android 10 Bluetooth and describes an out-of-bounds write caused by a missing bounds check. This could allow remote code execution with no privileges, requiring user interaction to exploit. Affected product/area: Android 10 Bluetooth stack. Root cause: improper bounds checki...

CVE-2019-9388

CVE-2019-9388 affects Android 10 Bluetooth: a missing bounds check causes an out-of-bounds read in the Bluetooth service, enabling remote information disclosure without user interaction. Impact is information disclosure with HIGH/Partial confidentiality impact per CVSS vectors. Exploitation statu...