CVE-2019-9388

CVE-2019-9388 affects Android 10 Bluetooth: a missing bounds check causes an out-of-bounds read in the Bluetooth service, enabling remote information disclosure without user interaction. Impact is information disclosure with HIGH/Partial confidentiality impact per CVSS vectors. Exploitation statu...

CVE-2020-13838

CVE-2020-13838 affects Samsung mobile devices running P (9.0) and Q (10.0) software, where the DeX Lockscreen fails to block access to the Quick Panel and notifications. The issue is documented across multiple sources (NVD entry and Red Hat advisory) without details on a concrete exploit vector o...

CVE-2021-0982

CVE-2021-0982 affects Android 12 and is due to a missing permission check in getOrganizationNameForUser within DevicePolicyManagerService.java, leading to local information disclosure without requiring user interaction. The vulnerability enables disclosure of organization name information with lo...

CVE-2021-0984

CVE-2021-0984 affects Android 12, related to onNullBinding in ManagedServices.java. The issue is a permission bypass due to an incorrectly unbound service, enabling local elevation of privilege with no additional privileges and no user interaction required. Documents confirm vulnerability details...

CVE-2021-0985

CVE-2021-0985 affects Android 12 via AlertReceiver.java (onReceive). A missing permission check could allow dismissing a system dialog, enabling local privilege escalation without extra execution privileges or user interaction. The Pixel bulletin lists this under Framework with updated AOSP patch...

CVE-2021-0997

CVE-2021-0997 affects Android 12; the issue is in GnssNetworkConnectivityHandler.java (handleUpdateNetworkState) where a log information disclosure enables local information disclosure with no extra privileges and without user interaction. Exploitation requires local access; impact is confidentia...

CVE-2021-1001

CVE-2021-1001 describes a vulnerability in the Android Media/Video encoding path: In PVInitVideoEncoder of mp4enc_api.cpp, an out-of-bounds read caused by a heap buffer overflow can lead to local information disclosure without additional privileges or user interaction. Affected is Android 12; exp...

CVE-2021-1009

CVE-2021-1009 affects Android 12 and is described as a local information disclosure through the PackageManagerService.setApplicationCategoryHint, enabling an attacker to determine whether an app is installed without any query permissions. The vulnerability arises from a side-channel information d...

CVE-2021-1017

Consolidated findings for CVE-2021-1017 (Android 12): The issue arises from a missing permission check in AdapterService and GattService definitions in AndroidManifest.xml, enabling local privilege escalation by disabling Bluetooth connectivity. Affected component(s): Android’s Bluetooth framewor...

CVE-2021-1026

Affected software: Android 12 (CVE-2021-1026) involves the RttServiceImpl.java startRanging flow. Vulnerability summary: A side-channel information disclosure could allow a local attacker to infer whether an app is installed without query permissions, leading to local information disclosure with ...

CVE-2021-1029

CVE-2021-1029 affects the Android graphics SurfaceFlinger component. In setClientStateLocked, a use-after-free leads to an out-of-bounds write, enabling local privilege escalation with no extra execution privileges required. This vulnerability is reported across multiple sources (NVD, Red Hat, CN...

CVE-2021-1043

CVE-2021-1043 affects Google Pixel devices (Pixel/Titan-M) as documented in the Pixel Update Bulletin. The issue is described as a downgrade attack due to under-utilized anti-rollback protections, enabling local information disclosure without additional execution privileges. Affected component: T...

CVE-2021-39640

CVE-2021-39640 involves an out-of-bounds write in the Android kernel's dwc3 gadget ep0 queue function (__dwc3_gadget_ep0_queue) caused by improper locking. This vulnerability enables local privilege escalation with no user interaction, as documented across multiple sources (NVD, Red Hat, CNVD, OS...

CVE-2021-39646

CVE-2021-39646 is an information-disclosure issue affecting the Android kernel Bootloader, listed under the Pixel vulnerability bulletin with type ID and moderate severity for that component. Public details in the connected records indicate an information-disclosure impact (confidentiality) with ...

CVE-2021-39650

CVE-2021-39650: In the Android kernel, an out-of-bounds write due to a missing bounds check enables local escalation to System privileges without user interaction. This is tied to Android kernel code and is documented with a MEDIUM base CVSS and LOCAL access. The provided connected documents conf...

CVE-2021-39767

CVE-2021-39767 affects Android 12L via the miniadb component, where an insecure default value permits read/write access to recovery system properties, enabling local elevation of privilege without extra execution privileges or user interaction. Impact is described as local elevation of privilege ...

CVE-2022-20271

CVE-2022-20271 affects Android 13, originating in the PermissionController. The issue enables a user-visible misdirection/insufficient UI to grant certain permissions without proper user consent, resulting in potential local elevation of privilege. The vulnerability is categorized as an EoP issue...

CVE-2022-20323

CVE-2022-20323 affects Android 13, with a missing permission check in the PackageManager that can disclose local information. The issue enables a local information disclosure vulnerability without user interaction, requiring user privileges. Vulnerable component: PackageManager (Android framework...

CVE-2022-21772

The CVE-2022-21772 entry concerns the TEEI driver, where a race condition can cause type confusion and lead to local escalation of privileges with System rights, requiring no user interaction. The vulnerability context and impact are documented across multiple sources (NVD, Red Hat, PRION, CVE li...

CVE-2022-26094

The CVE-2022-26094 entry describes a null pointer dereference in the parser_auxC function of the libsimba library, prior to Samsung SMR Apr-2022 Release 1, which allows remote attackers to cause an out-of-bounds write. The vulnerability is discussed across multiple feeds (NVD/Red Hat/CNVD/CVELIST...

CVE-2022-26097

CVE-2022-26097 affects the libsimba library, specifically the parser_unknown_property function, where a null pointer dereference can lead to an out-of-bounds write. The issue is exploitable remotely over a network with no authentication and no user interaction, and is reported to impact confident...

CVE-2022-26099

CVE-2022-26099 is a null pointer dereference in the parser_infe function of the libsimba library, applicable before the Samsung SMR Apr-2022 Release 1. The vulnerability can cause out-of-bounds reads and is exploitable remotely without authentication, per the CVE description. Connected sources re...

CVE-2022-26465

CVE-2022-26465 relates to MediaTek audio IPI, where an incorrect bounds check can trigger an out-of-bounds write in the audio IPI component. The vulnerability could enable local escalation of privilege with SYSTEM execution privileges, and does not require user interaction for exploitation. A pat...

CVE-2022-30727

CVE-2022-30727 affects Samsung Mobile’s PersonaManagerService, due to improper handling of permissions in addAppPackageNameToAllowList. The issue allows a local attacker to set certain workspace settings. Root cause: permission management weakness in PersonaManagerService prior to the SMR Jun-202...

CVE-2022-32592

The CVE-2022-32592 entry concerns MediaTek chipsets with a flaw in the cpu dvfs subsystem, where a missing bounds check enables an out-of-bounds write. This can allow local privilege escalation to SYSTEM with no user interaction required. The only remediation information present is Patch ID ALPS0...

CVE-2022-33690

The CVE-2022-33690 issue concerns Samsung Contacts Storage on Samsung mobile devices, due to improper input validation that enables path traversal. The vulnerability allows an attacker to access arbitrary files via the Contacts Storage component prior to the SMR July 2022 Release 1. Documented im...

CVE-2022-33721

CVE-2022-33721 affects Samsung DeX for PC prior to SMR Aug-2022 Release 1, due to improper handling of PendingIntent that enables a local attacker to access files with system privileges. The Red Hat/NVD entries reiterate the same description; Red Hat lists it under CVE-2022-33721, and other sourc...

CVE-2022-33724

The CVE-2022-33724 entry concerns Exposure of Sensitive Information in the Samsung Dialer app, where a local attacker could access the ICCID via logs prior to SMR Aug-2022 Release 1. The Red Hat and other records corroborate the description; no exploit details or affected versions beyond this ris...

CVE-2023-20712

CVE-2023-20712 affects MediaTek WLAN code (wlan module) and is due to a missing bounds check, enabling an out-of-bounds write that can yield local privilege escalation to System level. Exploit requires LOCAL access with HIGH privileges and no user interaction. Patch: ALPS07796914 (Issue ALPS07796...

CVE-2023-20990

CVE-2023-20990 affects Android 13, due to an out-of-bounds read in the function btm_ble_rand_enc_complete of btm_ble.cc caused by a missing bounds check. This can lead to local information disclosure with System execution privileges required; no user interaction is needed. The available connected...

CVE-2023-21151

CVE-2023-21151 affects the Google BMS kernel module in the Android kernel (Pixel devices). The issue is a heap buffer overflow that can cause an out-of-bounds write, enabling local escalation of privileges to System level. Exploitation requires local access; user interaction is not needed. Public...

CVE-2023-21152

Summary (CVE-2023-21152) : The vulnerability is an out-of-bounds read in FaceStatsAnalyzer::InterpolateWeightList within face_stats_analyzer.cc on Android kernel. The root cause is a missing bounds check in the weight interpolation logic, enabling a local information disclosure with user-privileg...

CVE-2023-21181

CVE-2023-21181: In btm_ble_update_inq_result in btm_ble_gap.cc (Android 13) there is a possible out-of-bounds read due to a heap buffer overflow, potentially enabling local information disclosure with system privileges. Exploitation does not require user interaction. Affected product/version: And...

CVE-2023-21375

CVE-2023-21375 affects Sysproxy with an out-of-bounds write caused by an integer underflow. The vulnerability enables local privilege escalation without extra execution privileges and does not require user interaction. Public documentation reports this issue but provides no concrete exploit detai...

CVE-2023-32883

CVE-2023-32883 affects MediaTek devices with Engineer Mode where a missing bounds check enables an out-of-bounds write, potentially allowing local escalation of privileges (System) without user interaction. Root cause: improper bounds checking in Engineer Mode. Impact: local privilege escalation ...

CVE-2024-20047

CVE-2024-20047 is a MediaTek-related vulnerability in the battery component. The issue is described as an out-of-bounds read caused by an integer overflow, potentially enabling local information disclosure with System privileges required. User interaction is not needed for exploitation. A patch i...

CVE-2024-39433

CVE-2024-39433 affects UNISOC/drm service components in chipsets and is associated with a missing bounds check, causing an out-of-bounds write that can lead to local denial of service with System execution privileges. The connected sources confirm the vulnerable component (drm service) and the im...

CVE-2024-39439

The CVE-2024-39439 entry affects the DRM service and is caused by a missing bounds check that enables an out-of-bounds write. Reported impact is local denial of service with System execution privileges required; no exploitation details are provided in the connected documents. Affected software ve...

CVE-2025-0082

CVE-2025-0082 describes an information disclosure in Google Android involving StatusHint.java and TelecomServiceImpl.java. The root cause is a confused deputy that could allow an attacker to reveal images across users, resulting in local information disclosure without extra execution privileges. ...

CVE-2025-20648

CVE-2025-20648 affects MediaTek chipsets' apu component, with a possible out-of-bounds read caused by a missing bounds check. This could lead to local information disclosure without user interaction. Exploitation details are not provided in the connected documents. A patch is referenced (ALPS0945...

CVE-2025-20650

CVE-2025-20650: A possible out-of-bounds write due to a missing bounds check could allow local elevation of privilege on affected MediaTek devices when an attacker has physical access. The vulnerability requires no additional execution privileges but does require user interaction according to the...

CVE-2010-4804

CVE-2010-4804 affects Android’s built-in browser prior to 2.3.4, enabling remote attackers to read SD card contents via crafted content:// URIs. Root cause involves BrowserActivity.java and BrowserSettings.java in com/android/browser/. The connected sources confirm affected version range and the ...

CVE-2015-3826

The CVE-2015-3826 issue affects Android’s media stack in libstagefright (MPEG4Extractor.cpp) where MPEG4Extractor::parse3GPPMetaData does not enforce a minimum size for UTF-16 BOM strings. This can enable a remote attacker to trigger a crash in mediaserver via crafted 3GPP metadata (integer under...

CVE-2015-5573

CVE-2015-5573 is a Type Confusion vulnerability affecting Adobe Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS, and prior to 11.2.202.521 on Linux, plus affected AIR/SDK components. The root cause is a type confusion error that could allow an attacker to execute ar...

CVE-2015-6616

CVE-2015-6616 is a memory-corruption vulnerability in Android’s mediaserver. It affects Android versions prior to 5.1.1 LMY48Z and 6.0 prior to 2015-12-01, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted media file (internal bugs 24630158 and 2388280...

CVE-2015-6637

The CVE-2015-6637 issue is an elevation of privilege in the MediaTek misc-sd kernel driver used by Android prior to 5.1.1 LMY49F and 6.0 prior to 2016-01-01. A crafted application could exploit the driver to execute code with kernel privileges. Public sources describe it as a local privilege esca...

CVE-2016-10275

CVE-2016-10275 is an elevation-of-privilege vulnerability in the Qualcomm bootloader that could allow a local malicious Android app to execute arbitrary code in the kernel context. Public documentation ties this to Qualcomm bootloader flaws and Android patch coverage. The Android May 2017 bulleti...

CVE-2016-1948

Mozilla Firefox for Android before 44.0 is vulnerable to MITM during lightweight-theme installation because it may not require HTTPS for the client-server data stream, allowing an attacker to replace theme images/colors. Connected advisories indicate this is a real vulnerability affecting Firefox...

CVE-2017-0392

CVE-2017-0392 is a denial-of-service flaw in Android’s Mediaserver, specifically VBRISeeker.cpp in libstagefright. A crafted media file can cause a device hang or reboot via Mediaserver. Affected products/versions include Android 4.4.4–7.1.1. Public details describe the vulnerability’s root cause...

CVE-2017-0467

CVE-2017-0467 describes a remote code execution vulnerability in Android’s Mediaserver. An attacker could exploit memory corruption during media file and data processing by using a specially crafted file, enabling code execution within the Mediaserver process. Affected versions are Android 6.0–7....